In Sambi information for identification and authorization of the subject can be sent as attributes in the SAML Assertion. In the context of Skolfederation these attributes are defined in the Sambi attribute profile. Adherence of the profile for sending attributes is highly recommended for interoperability in the federation.
The profile is developed and maintained by Sambi.
The current version of the attribute profile can be found below.
(In Swedish) Sambi Attributspecifikation 1.5: pdf, docx
Attribute release should always be done in accordance to current legislation such as PDL and GDPR. Always customize the attribute releases per SAML SP in your IdP solution. Never release more than required, and do not release everything to everyone.
Contact
Missing an attribute in the attribute profile, or have questions?
Please contact us at info@sambi.se with information.
Add Comment