The SDSS project has been delegated registration authority for the URN namespace urn:mace:ac.uk:sdss.ac.uk. Within this namespace, we register URNs under one sub-space related to the eduPerson attribute standard and three sub-spaces corresponding to three different classes of Shibboleth entity:
urn:mace:ac.uk:sdss.ac.uk:entitlement is used to register URNs for eduPerson entitlement values.
urn:mace:ac.uk:sdss.ac.uk:federation is used to register URNs for Shibboleth federations.
urn:mace:ac.uk:sdss.ac.uk:provider:identity is used to register URNs for Shibboleth identity providers (origins).
urn:mace:ac.uk:sdss.ac.uk:provider:service is used to register URNs for Shibboleth service providers (targets).
Rules and existing registrations for each URN sub-space follow.
URNs for eduPerson entitlement values are allocated under urn:mace:ac:uk:sdss:entitlement. These values are used by identity providers to indicate a subject's entitlement to access a particular service or to access particular restricted content within a service.
urn:mace:ac.uk:sdss.ac.uk:entitlement:entitlement1 (test use only)
urn:mace:ac.uk:sdss.ac.uk:entitlement:entitlement2 (test use only)
urn:mace:ac.uk:sdss.ac.uk:entitlement:entitlement3 (test use only)
urn:mace:ac.uk:sdss.ac.uk:entitlement:entitlement4 (test use only)
URNs for federations are allocated under urn:mace:ac.uk:sdss:federation. It is not anticipated that further allocations will be made within this space except for experiments with multi-federation working within the SDSS project; federations managed in other projects should acquire their own delegated URN spaces if possible.
urn:mace:ac.uk:sdss.ac.uk:federation:sdss
URNs for origins are allocated on the assumption that there will only be one at the majority of organisations. We allocate urn:mace:ac.uk:sdss:provider:identity:org-dns for such origins, and urn:mace:ac.uk:sdss:provider:identity:origin-dns for others.
Identity providers for projects within the JISC Core Middleware Program may be registered as urn:mace:ac.uk:sdss:provider:identity:project.ac.uk, but only if the domain name in question has been formally allocated to the project.
urn:mace:ac.uk:sdss.ac.uk:provider:identity:iay.org.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:nevis.ed.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:jacinto.ucs.ed.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:lock.ncl.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:oucs.ox.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:identity:erewhon.ucs.ed.ac.uk
We allocate urn:mace:ac.uk:sdss.ac.uk:provider:service:service-dns for service providers under the assumption that a single institution would likely host more than one service, but not more than one per fully qualified domain name (Note: many Shibboleth applications may be hosted by a single service provider). When more than one service requires a URN at a given FQDN, we allocate urn:mace:ac.uk:sdss.ac.uk:provider:service:service-dns:service-name.
urn:mace:ac.uk:sdss.ac.uk:provider:service:target.iay.org.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:target.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:nevis.ed.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:update.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:digimap.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:biosys.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:emol.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:eig.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:times-index.sdss.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:bodach.ucs.ed.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:pecos.ucs.ed.ac.uk
urn:mace:ac.uk:sdss.ac.uk:provider:service:shibboleth.oucs.ox.ac.uk