Document ID: chunk:federal_register_of_legislation:F2024L01443:schedule:3:p1
Version: federal_register_of_legislation:F2024L01443
Segment Type: schedule
Provision Reference: sch 3 (pt 1/5)
Character Range: 216908–221345

Schedule 3 – AGDIS Attribute Profile. Page 44

 Table 31 Identity System Metadata attributes

Attribute                     Description                                                                                                                                     Access policy   IP                 Fulfilme nt   Proven- ance       Consent Type   Data representation
                                                                                                                                                                                              level
Digital Pairwise Identifier   The Digital ID Identifier is a unique identifier for an individual.                                                                             Open            IP1 and stronger  Required       Provider managed   Not required   Regardless of the federation protocol used this attribute MUST be generate pairwise identifiers in accordance with algorithm outlined in section 8.1 of the OpenID Connect Core 1.0 specification.

                              The Digital ID Identifier:

                               1.                 For PRPs, is the pairwise identifier assigned by an IXP; and

                               2.                 for IXPs, the GPI or pairwise identifier assigned by an ISP.
Authentication Time           The date and time when the individual successfully authenticated at the ISP.                                                                    Open            IP1 and stronger  Required       ISP                Not required   A date and time representation aligned to data types used by the federation protocol.
                                                                                                                                                                                                                               managed
Assurance Level               The assurance level of the authenticated Digital ID outlines the IP level and authentication level attained during authentication at the ISP.   Open            IP1 and stronger  Required       ISP                Not required   The assurance level MUST be one of the assurance level URNs outlined in Table 29 above.
                                                                                                                                                                                                                               managed
RP Audit Identifier           The RP Audit Identifier requirements are outlined in Schedule 1 (AGDIS Onboarding Specifications).                                              Open            IP1 and stronger  Required       IXP                Not required   To ensure uniqueness the RP Audit Identifiers within the AGDIS a UUID is used. The UUID generation MUST conform to RFC4122.
                                                                                                                                                                                                                               managed

    2.3   Assumed Self-Asserted Attributes

 Assumed Self-Asserted Attributes are attributes provided by an individual that can assist with service delivery and enhance the overall user experience for example by prefilling online forms.

 An ISP SHOULD support the Self-Asserted Attributes outlined in this section. An IXP SHOULD support brokering request for these attributes.
 Self-asserted attributes are subject to an Open access policy and attribute requests MAY be fulfilled at any assurance level unless an attribute's sharing policy explicitly states otherwise.

 An IXP MUST request express consent from the individual on changes it is aware of to any Self- Asserted Attributes.

      2.3.1      Preferred Name

 An individual may nominate a name they prefer to be known as at the PRPs they access. A Preferred Name can reflect an individual's personal preference or may be culturally significant. Ideally an individual should be able to nominate a preferred name they wish to use on the AGDIS.

 Given an individual may use the attribute at their ISP to satisfy cultural requirements the preferred name SHOULD be easy to update.

 Preferred Name attribute SHOULD be assumed to be self-asserted.

 Although it is a Core Attribute, a Preferred Name MUST not be used as an authoritative attribute in the same manner as a PRP would use any of the verified name