Office of the CIO › Computing Services › Services › Security Services › Identity and Access Management › Authentication Services › How to Use 2fa Authentication › Attribute Release Policy

Attribute Release Policy

For Service Providers that are protected by CMU Web Login, users that authenticate successfully will release a set of default user attributes to the service they are logging into. The following user attributes are released by default to all Web Login protected Service Providers:

Attribute	Faculty, Staff, Alumni, Sponsored	Students
eduPersonPrincipalName (UserID i.e., acarnegie@andrew.cmu.edu)	X	X
eduPersonScopedAffiliation (i.e., staff, faculty, student, alumni, sponsored)	X	X
givenName (i.e., Legal First Name)	X	On Request
surname (i.e., Legal Last Name)	X	On Request
commonName (i.e., Legal Full Name)	X	On Request
email (i.e., CMU Preferred Email)	X	On Request
displayName (i.e., Preferred Full Name)	X	On Request

Note: To properly map these attributes to your service, you may need to reference their SAML2 technical names.