Clarify Core vs. Extended Attributes in AARC Attribute Profile

[NicolasLiampotis]

This issue proposes improving the clarity around core/mandatory and optional attributes within AARC-G056.

The document currently lacks clear distinction between core/mandatory/essential vs. optional/non-essential attributes.

The document should explicitly define core/mandatory/essential and optional/non-essential attributes and clarify their purpose.

Possible Solutions:

• Consider using tables or separate sections to clearly differentiate between the two types of attributes, or
• Create a new, separate document specifically for optional/non-essential attributes.

[NicolasLiampotis]

We distinguish between the following profiles:

• Core: This attribute is part of the core profile and is considered essential for basic functionality.
• Extended: This attribute is part of the extended profile and may not be supported by all AARC compliant proxies. Its inclusion provides additional information about the subject but is not mandatory.

We propose the following classification for profile attributes:

• Subject Identifier
  • Public Subject Identifier --> Core
  • Pairwise Subject Identifier --> Core
• Name
  • Display Name --> Core
  • Given Name --> Core
  • Family Name --> Core
• Email
  • Email Address --> Core
  • Email verification status --> TBD
• Organisation
  • Organisation Display Name --> Core
  • Organisation Domain --> Core
  • Organisation’s Country --> Extended
  • Organisation compliance with policies --> Extended
• Affiliation
  • Affiliation within Home Organisation --> Core
  • Affiliation within Community/Research Infrastructure --> TBD
• Assurance --> Core
• Group and Role information --> Core
• Resource Capabilities --> Core
• External Subject Identifiers
  • External subject identifiers --> Extended
  • ORCID --> TBD
• SSH Public keys --> Extended
• Certificates
  • Certificate Subject DNs --> Extended
  • Certificate Issuer DNs --> Extended
• Subject Type --> TBD
• Subject Status --> Extended
• Agreement to Policies --> Extended
• Authenticating Authorities --> Extended

[NicolasLiampotis]

The classification of the attributes has been updated as follows:

Attribute Category	Attribute Name	Profile (Core or Extended)
Subject Identifier	Public Subject Identifier	Core
	Pairwise Subject Identifier	Core
Name	Display Name	Core
	Given Name	Core
	Family Name	Core
Email	Email Address	Core
	Email verification status	TBD (see #28)
Organisation	Organisation Display Name	Core
	Organisation Domain	Core
	Organisation's Country	Extended
	Organisation Compliance with Policies	Extended
Affiliation	Affiliation within Home Organisation	Core
	Affiliation within Community/Research Infrastructure	Extended
Assurance	Assurance	Core
Group and Role information	Group and Role information	Core
Resource Capabilities	Resource Capabilities	Core
External Subject Identifiers	External Subject Identifiers	Extended
	ORCID	Extended
SSH Public keys	SSH Public keys	Extended
Certificates	Certificate Subject DNs	Extended
	Certificate Issuer DNs	Extended
Subject Type	Subject Type	Core
Subject Status	Subject Status	Extended
Agreement to Policies	Agreement to Policies	Extended
Authenticating Authorities	Authenticating Authorities	Extended

Blocked by #28