| Description | The user's unique ID at his home organisation (the IdP where the user is logged in) |
| # of values | Sigular |
| Permissible values | All values have the form ID@org, where ID is the user's unique ID and org that of his organisation. The org part must match the value of the schacHomeOrganization attribute. |
| Semantics | |
| Examples | jens.hansen@ku.dk |
| Typical use | Authentication, Logging |
| LDAP name | eduPersonPrincipalName |
| WAYF status | MUST |
| Notes | This attribute has a special status in WAYF in that WAYF will stop a login flow if an identity provider has sent WAYF a malformed value of eduPersonPrincipalName. |