This list includes the attributes available for users when logging in using login.helsinki.fi single sign-on service or from LDAP. All attributes are not available for all users.

Columns

• LDAP: Marked if attribute is not available in LDAP.
• SAML name: Attribute is available from IdP using SAML2 protocol.
• OIDC claim name: Attribute is available from IdP using OIDC protocol.

We use Haka's funetEduPerson schema for attributes included in it. Check the schema specification for more information https://wiki.eduuni.fi/display/CSCHAKA/funetEduPersonSchema2dot5.

1. Technical name for the attribute used in SAML messages.
2. Multivalued in the attribute schema, but single valued in the University of Helsinki, at least for now.
3. Check Haka federation convertion for more information about the values: https://wiki.eduuni.fi/display/CSCHAKA/funetEduPersonSchema2dot5#funetEduPersonSchema2dot5-eduPersonAffiliation
4. hyGroupCn (memberOf) includes all user's IAM groups: https://helpdesk.it.helsinki.fi/ohjeet/muut-ohjeet/ryhmienhallintatyokalu-iam

Recommendations

User identifiers

See https://wiki.helsinki.fi/xwiki/bin/view/SO/User%20management/login.helsinki.fi/#HUseridentifiers

Organisation attributes

hyOrganizationPrimaryUnit - Ensisijainen organisaatioyksikkö in finnish

Person’s primary organisational unit at the University, using the code of the organisational register. This attribute is never empty, but the value can be 1, if not known. If you do not know which organisation attribute should be used in your system, use this one.

hyProfitUnit - Tulosyksikkö in finnish

Person's profit unit using financial structure. The aim is to calculate the information for all users, but for a small number of users, this may be empty. For example, if the student’s agreement or right to study has already expired.

hyPersonEmployerCode - Työntekijän palkanmaksuyksiköt in finnish

Employees payroll unit, or more specifically, the profit units of the employee’s payroll WBS from SAP HR. Note: If a person has several employment contracts, there will be several values, as opposed to the above profit unit.

hyPersonPersonnelUnit - Työntekijän ja muun sopimussuhteisen henkilön henkilöstöyksiköt in finnish

Employees and others personnel unit according to the staff structure. This information can be obtained for all individuals found in SAP HR, including those not employed. NB! In practice, the personnel unit goes deeper in the tree hierarchy than the financial structure, which is why the use of the personnel structure will be preferred instead of the financial structure. For example, the primary organisational unit is calculated according to the personnel structure.

hyPersonStudentFacultyCode - Opiskelijan organisaatiot in finnish

Student’s organisation codes for all student rights in Sisu. In practice, always on the faculty level, with the exception of Open University studies, where the student receives the organisational code H930.

hyPersonEducationCode - Opiskelijan koulutusohjelmat in finnish

Student’s degree programme codes from Sisu. In practice, this field is empty with the study rights that do not lead to the degree, for example, open university studies. Note: Degree programme codes can be found only in Sisu, not in the organisation register, as opposed to the others above.

Coming soon: attribute, which includes all of the employee’s affiliations in relation to the organisation. Organisational information is used in the organisation register’s code.

For more information about the organisational structures see Data management workgroup https://workgroups.helsinki.fi/pages/viewpage.action?pageId=239239725  (for UH employees and in finnish only).