sed to identify the owner of a certificate and the authority that issued the certificate.
domain name - A domain name is that portion of an Internet Uniform Resource Locator (URL) that fully identifies the server program that an Internet request is addressed to. InCommonFederation.org is an example of a domain name.
Domain Name Service (DNS) - An Internet service that translates domain names to and from IP addresses.
eduOrg - An LDAP object class authored and promoted by the EDUCAUSE/Internet2 eduPerson Task Force to facilitate the development of inter-institutional applications. The eduOrg object class focuses on the attributes of organizations. Current documentation on the eduOrg object class is available at http://www.educause.edu/eduperson/.
eduPerson - An LDAP object class authored and promoted by the EDUCAUSE/Internet2 eduPerson Task Force to facilitate the development of inter-institutional applications. The eduPerson object class focuses on the attributes of individuals. Current documentation on the eduPerson object class is available at http://www.educause.edu/eduperson/.
electronic identifier - A string of characters or structured data that may be used to reference an electronic identity. Examples include an email address, a user account name, a a campus NetID, an employee or student ID, or a PKI certificate.
electronic identity - A set of information that is maintained about an individual, typically
in campus electronic identity databases. May include roles and privileges
as well as personal information. The information must be authoritative to
the applications for which it will be used.
electronic identity credential - An electronic identifier and corresponding personal secret associated
with an electronic identity. An electronic identity credential typically is
issued to the person who is the subject of the information to enable that
person to gain access to applications or other resources that need to
control such access.
electronic identity database - A structured collection of information pertaining to given
individuals. Sometimes referred to as an "enterprise directory". Typically
includes name, address, email address, affiliation, and electronic
identifier(s). Many technologies can be used to create an identity
database, for example LDAP or a set of linked relational databases.
enterprise directory - An enterprise directory is a core middleware architecture that may provide common authentication, authorization, and attribute services to electronic services offered by an institution.
enterprise directory infrastructure - The infrastructure required to support and maintain an enterprise directory. This may include multiple directory hardware components as well as the processes by which data flows into and out of the directory service.
federated identity - The management of identity information between members of a federation.
federation - A federation is an association of organizations that come together to exchange information as appropriate about their users and resources in order to enable collaborations and transactions.
Federation Operation Policies and Practices (FOPP) - The policies and practices the Federation operates under on a
day-to-day basis. This document describes the activities of the Federation
organization, the process of Participants applying and being accepted, etc.,
and how decisions are made.
Handle - A reference assigned to a user for the purpose of retrieving attributes about the user. The handle is not in any way linked to the identity of the user.
Handle Service - The Identity Provider component responsible for (indirectly) providing a handle to be used for making user attribute requests to an Identity Provider Attribute Authority.
Handle Service subject DN - The distinguished name of the Handle
Handle Service URL - The Internet address of the Handle Service.
higher education institution - A two- or four-year post-secondary, degree-granting institution that is regionally accredited by an agency on the U.S. Department of Education's list of Regional Institutional Accrediting Agenc