sn
sn
A short description
Surname or family name.
Usage
Utility class
[ Core | Standard | Extended ]
Attribute belongs to minimally useful attribute set.
Is attribute required?
Mandatory. Must be supported by all applications in the Feide federation.
Confidentiality
Medium. Personal information.
Integrity
High. Values are required to be up to date, maximum 24 hours latency.
Availability
High. If the LDAP uses this attribute, it should as far as possible be provided for all.
relevant objects. Authorization will fail if no value is available.
Details
Multiple values?
Multivalued
Value format
DirectoryString
Attribute origin
Common Attributes
LDAP
- OID
- 2.5.4.4
- Datatype
- DirectoryString
eduGAIN
This attribute is planned to be used with eduGAIN. In eduGAIN this attribute will be identified as:
urn:mace:dir:attribute-def:sn
« Back to view list of all attributes
In X.520, this attribute is called surname. If the person has a multi-part surname (whether hyphenated or not), store each component as a separate value in this multi-valued attribute. That yields the best results for the broadest range of clients doing name searches. Beware of applications sorting persons by sn-cn, they may need access controls added to protect them from multivalued surnames.
Feide usage notes
One of the two mandatory attributes in the person object class from which eduPerson derives (the other is cn), and as such, one of three "core application utility" attributes; the third is eduPersonOrgDN.
Source is a student registry or human resource system.
Example applications for which this attribute would be useful:
All.
Examples
Carson