Introduction
These pages present the result of initial discussions, both within the working group as well as at a session at EWTI (link), around creating a mapping between SAML (spec) identifiers and attributes as these are commonly used in Research and Education identity federations and OpenID Connect (OIDC) (spec) identifiers and claims and vise-versa
The basis for the set of attributes is derived from the commonly used attributes in the eduPerson Schema (eduPerson), with some additional attributes from the SCHAC schema (SCHAC). No attempts was made to cover the full attribute set of both eduPERSON and SCHAC Schema, but rather it was attempted to initially create a mapping for what was perceived as the most commonly used attributes.
This document focusses on two aspects of mapping between OIDC and SAML:
- Transforming Identifiers between OIDC and SAML in a compatible way
- Mapping SAML attributes to OIDC Claims