eduPersonScopedAffiliation attribute

[nicoleharris]

Should this imply to release this attribute always to all SPs, including to publishers that are happy with only 'common-lib-terms'? Why should just the IdPs need to do something and not the SPs?
SPs that want to get the scopedAffiliation should either require this attribute in metadata or include a new (to-be-defined in this spec) EC value in metadata. How should the Identity Provider’s registrar perform this mandatory check? Would a statement by the IdP administrator be sufficient ?

From Thomas Leggenhager

How about adding "5.3.3 The Identity Provider releases the eduPersonScopedAffiliation attribute, on request." So that the request can include metadata and inline attribute requests.

From Brook Schofield

[thlengge]

Adding on request is fine.

For the second issue I suggest a new first para for '5 Registration Criteria' that would solve the problem that the registrar has no possibility to verify that 5.3.3 is really technically implemented at the IdP:
When an IdP administrator requests registration for the Academic Institution Entity Category at the IdP's registrar (normally the IdP's home federation), the IdP administrator confirms to meet the following criteria. The registrar verifies at least these criteria, where possible:

As reference: this is the current text:
When an Identity Provider’s registrar (normally the Identity Provider’s home federation) registers the Identity Provider in the Academic Institution Entity Category, the registrar MUST perform at least the following checks: