WAYF is an authentication system usable with WISEflow. It uses organisational ID and optionally national ID. This method of authentication is administered by the institution.
WAYF authentication features:
When a user authenticates successfully through the institution, they will be granted access to an existing user with that ID.
When a user authenticates successfully through the institution and no user with the ID exists in WISEflow, WISEflow creates a user for them with the given ID and information.
When a user authenticates successfully through the institution authentication system, we enrich the user holding the organisational ID in WISEflow with the following information:
- First name
- Last name
- Organisational ID
- National ID
- User role (Student → Participant, Staff → Assessor)
When a user authenticates successfully through WAYF, the following attributes will be linked to the user's information:
| Name | WAYF Attribute | URN:OID | Required From IDP |
|---|---|---|---|
| Last Name | sn | urn:oid:2.5.4.4 | True |
| First Name | gn displayName |
urn:oid:2.5.4.42 | True |
| Nickname | cn | urn:oid:2.5.4.3 | True |
| National Unique ID* |
schacPersonalUniqueID norEduPersonNIN |
urn:oid: |
False |
| The user's role at the identity provider's domain |
eduPersonScopedAffiliation eduPersonAffiliation |
urn:oid: |
False |
| Organisation** |
schacHomeOrganization eduPersonOrgDN |
urn:oid: |
True |
| Student Number* |
norEduPersonLIN |
urn:oid: |
False |
|
Unique Organisation ID |
eduPersonPrincipalName | urn:oid: 1.3.6.1.4.1.5923.1.1.1.6 |
True |
|
Email* |
urn:oid: 0.9.2342.19200300.100.1.3 |
False*** | |
|
The user's primary affiliation with home organisation |
eduPersonPrimaryAffiliation | urn:oid: 1.3.6.1.4.1.5923.1.1.1.5 |
True |
*A user in WISEflow can have multiple national IDs, student numbers and emails
**If organisation is not present, it is set from eduPersonPrincipleName
***Email is required if the WISEflow licence is set up to create users directly from WAYF
See this link for further information on WAYF: WAYF-WISEflow documentation