Repository navigation
Expand file tree
/
Copy pathAARC_Schema_Parseable.json
More file actions
301 lines (301 loc) · 12.8 KB
/
Copy pathAARC_Schema_Parseable.json
File metadata and controls
301 lines (301 loc) · 12.8 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
{
"id": "urn:geant:aarc-community:scim:schemas:core:1.0:User",
"name": "AARC Community Identity",
"description": "Attributes to describe a user in the context of his community, as defined by AARC",
"attributes": [
{
"name": "voPersonId",
"description": "A string representation of the subject’s identifier that is globally unique.",
"type": "string",
"uniqueness": "global",
"multiValued": false,
"caseExact": true,
"required": true,
"mutability": "immutable",
"returned": "always"
},{
"name": "displayName",
"description": "Subject’s full name in displayable form.",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": true,
"mutability": "readWrite",
"returned": "request"
},{
"name": "name",
"description": "",
"type": "complex",
"uniqueness": "none",
"multiValued": true,
"required": true,
"mutability": "readWrite",
"returned": "request",
"subAttributes": [
{
"name": "givenName",
"description": "Name strings that are the part of a subject's name that is not their surname.",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "familyName",
"description": "Family Name",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
}
]
},{
"name": "email",
"description": "The subject’s primary (preferred) email address for contact purposes. This email address must be formatted in Mailbox form as specified in RFC2821.",
"type": "string",
"uniqueness": "global",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "organizationName",
"description": "Standard name of the organisation (institution) with which this subject is associated.",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "schacHomeOrganization",
"description": "Specifies a subject’s home organisation using the domain name of the organisation according to [RFC1035].",
"type": "string",
"uniqueness": "global",
"multiValued": false,
"required": false,
"caseExact": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "voPersonExternalAffiliations",
"description": "One or more home organisations (such as, universities, research institutions or private companies) that this subject is affiliated with. The syntax and semantics follows the eduPersonScopedAffiliation attribute.",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "default"
},{
"name": "voPersonExternalAffiliations",
"description": "One or more home organisations (such as, universities, research institutions or private companies) that this subject is affiliated with. The syntax and semantics follows the eduPersonScopedAffiliation attribute.",
"type": "complex",
"uniqueness": "none",
"multiValued": true,
"required": true,
"mutability": "readWrite",
"returned": "request",
"subAttributes": [
{
"name": "value",
"description": "Value of the voPersonExternalAffiliation. Example: gradstudent@yourvo.org",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": true,
"mutability": "readWrite",
"returned": "request"
},{
"name": "prior",
"description": "Denotes prior user affiliation, no longer current",
"type": "boolean",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
}
]
},{
"name": "assurance",
"description": "The assurance of the subject’s identity, following the components defined in the REFEDS Assurance Framework (RAF), including Identifier Uniqueness, Identity Assurance, and Attribute Assurance. AARC-compliant AAIs MAY also support additional assurance frameworks where relevant.",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": true,
"mutability": "readWrite",
"returned": "always"
},{
"name": "entitlements",
"description": "This attribute describes the groups and roles this subject is a member of (AARC-G069) or the resource or child-resource a subject is allowed to access, optionally specifying certain actions the subject is entitled to perform (AARC-G027).",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "entitlements",
"description": "This attribute describes the groups and roles this subject is a member of (AARC-G069) or the resource or child-resource a subject is allowed to access, optionally specifying certain actions the subject is entitled to perform (AARC-G027).",
"type": "complex",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request",
"subAttributes": [
{
"name": "value",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "type",
"description": "Type of the entitlement",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "display",
"description": "Display name of the entitlement",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
}
]
},{
"name": "Version",
"description": "This attribute indicates the version of the AARC Attribute Profile that is being used. It provides a clear reference to the specific set of attributes and definitions that the subject’s digital identity conforms to.",
"type": "string",
"uniqueness": "global",
"multiValued": false,
"caseExact": true,
"required": true,
"mutability": "readWrite",
"returned": "request"
},{
"name": "voPersonScopedAffiliation",
"description": "Specifies the person's affiliation within the Community/Research infrastructure in broad categories defined in the eduPerson schema. Any scope (e.g. “community.example.org”) used after the at sign MUST be announced by the Collaboration Management",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "AARCExternalIDs",
"description": "External identifiers of the user (e.g. GitHub, Home Organisation identifier, gmail, etc)",
"type": "complex",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request",
"subAttributes": [
{
"name": "iss",
"description": "",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": true,
"mutability": "readWrite",
"returned": "default"
},{
"name": "id",
"description": "",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": false,
"required": true,
"mutability": "readWrite",
"returned": "default"
}
]
},{
"name": "eduPersonOrcid",
"description": "ORCID identifier assigned to this user.",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "sshPublicKey",
"description": "SSH public key(s) of the user.",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "voPersonCertificateDN",
"description": "The Subject Distinguished Name(s) of the user's X.509 certificate(s).",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "voPersonCertificateIssuerDN",
"description": "The Subject Distinguished Name(s) of the user’s X.509 certificate issuer(s).",
"type": "string",
"uniqueness": "none",
"multiValued": true,
"caseExact": true,
"required": false,
"mutability": "readWrite",
"returned": "request"
},{
"name": "UserType",
"description": "This attribute indicates if the Community ID is a user ID or a service ID. A the Community user ID is a Community ID issued to a natural person who registers to the Collaboration Management. A Community service ID is a Community ID used by services which need to authenticate with other services. A Community service ID is owned by at least one Community user ID holder who is responsible for the service ID.",
"type": "string",
"uniqueness": "none",
"multiValued": false,
"caseExact": false,
"required": false,
"mutability": "readWrite",
"returned": "request"
}
],
"meta": {
"resourceType": "Schema",
"location": "https://aarc-community.org/scim/schemas/urn:geant:aarc-community:scim:schemas:core:1.0:User"
}
}