SWAMID Service Definition
General description of SAML2 WebSSO
The service includes the authentication of users who hold an electronic identity at Örebro University, along with attribute transfer regarding the authenticated user. The service provider/university is a member of SWAMID, the Swedish identity federation for research and higher education. The service is configured in accordance with SWAMID's policy framework.
Policy for the management of personal data within the Identity Provider (IdP) established by Örebro University
The Identity Provider authenticates users on behalf of a service recognised by Örebro University, either through metadata delivered via the SWAMID identity federation or through a specific agreement between the service and Örebro University. Depending on the type of service, its purpose, and its relationship to Örebro University’s Identity Provider, one or more personal data attributes are transferred to the service from Örebro University’s directory and authorisation systems. This procedure complies with the intentions of Swedish data protection legislation.
Services categorised in SWAMID metadata with entity categories receive attributes in accordance with SWAMID’s recommendations, as described below.
Services primarily intended to support research and education receive approximately the same personal data that is automatically included in email, such as name, email address, user identity, status as a student or staff (employee or otherwise engaged), and confirmation that the user has an account with Örebro University.
Registered services that comply with the GÉANT Data Protection Code of Conduct, which aligns with the European Union’s data protection directive (in Sweden, the Personal Data Act), receive the same information.
Services designed for students that manage admissions, course registration, exam sign-up, examinations, workplace-based training, scholarship applications, user account self-service, and staff system self-service have access to the user’s personal identity number.
The service and its limitations
Örebro University guarantees service availability in line with the university's requirements and expectations. Örebro University adheres to SWAMID’s recommendations for attribute transfer based on entity categories. Örebro University reserves the right, in agreement with a service provider, to modify the attributes provided for a specific service, regardless of the recommendations for the entity categories for which the service provider is approved.
Support
For questions or error reports regarding Örebro University and its SAML2 WebSSO service, please contact IT Support.
Phone: +46 19 30 31 66
Email: itsupport@oru.se
Web: https://www.oru.se/english/study/student-services/it-services/it-support/