1. SAML metadata distribution

DFN-AAI exports SAML metadata about all SPF SPs to eduGAIN after metadata checks. There is also a ​web interface (support by e-mail: hotline /at/ aai.dfn.de). This should not be used to manage SAML metadata, but read-only.

2. Attribute release

sn, email, ePPN, ePSA, ePEntitlement, ePTID

What is the predominant unique identifier for end users?

eduPersonPrincipalName (ePPN) eduPersonTargetedID(ePTID)/SAML2 PersistentID Is there a policy for what should be used as the unique ID? No.