Subject Re: entity category work?
From Andrew Cormack <Andrew.Cormack@xxxxxx>
Date Fri, 26 Apr 2013 12:21:26 +0000

Thanks for the update. Does SbA distinguish between services where the benefit to the user is purely commercial (e.g. your software licence example) and those where the benefit was mostly educational (e.g. a site licensed journal)? Or are both eligible?
I can imagine some IdPs wanting to distinguish between those on policy grounds. 

I'd hope that the privacy risk of an ARP limited to those two attributes was seen as very low (the original UK federation recommendation was to have that as default). Unfortunately the European authorities seem rather resistant to the idea of providing regulatory incentives to use opaque identifiers ("it's still personal data", at least beyond the UK), so even for just ePTID there's still a bit of a selling job to do :( I'm still working on that.

Andrew Cormack
Chief Regulatory Adviser, Janet
t: +44 1235 822200

On 26 Apr 2013, at 13:06, "Tom Scavo" <trscavo@xxxxxxxxxxxxx> wrote:

> On Fri, Apr 26, 2013 at 7:23 AM, Nicole Harris <harris@xxxxxxxxxx> wrote:
>> Has anyone done  any more work on entity categories
> The InCommon Technical Advisory Committee will recommend a new
> category called the "Service by Affiliation Category" to the Steering
> Committee. Quoting the draft definition of the category:
> "The Service by Affiliation (SbA) category identifies service
> providers that benefit InCommon member institutions' community members
> (faculty, staff, students, and others) based solely on their
> affiliation with their institutions. For example, a software company
> might offer discounts to university students and faculty. Institutions
> that support the Service by Affiliation Catagory add value for their
> community members by facilitating access to these services with very
> little administrative overhead."
> The technical requirements to become an SbA SP are very similar to
> R&S. The attribute requirements for IdPs are very different, however,
> just eduPersonTargetedID and eduPersonScopedAffiliation.
> The definition and requirements are not final and the SbA category has
> not been discussed with the community. However, I'll note that Ken
> spoke a lot about "studentness" at the Annual Meeting earlier this
> week, and this category aligns with Ken's notion perfectly.
> HTH,
> Tom