Student verification in the UK federation

The UK federation helpdesk is frequently asked if we have a way to verify whether a person is a student. This page explains.

The UK federation exists to allow owners of online resources to make them available to academic organisations. To do this, the resource owners install service provider (SP) software. The members of the academic organisations then access this software through their identity provider (IdP) software.

UK federation membership

To use the UK federation to assess whether a person is a student, your organization must join the UK federation. Our eligibility policy states that your organization must be in the interests of education and research and/or be of benefit to the UK federation or its members. We have traditionally allowed organizations into the UK federation that wish to offer student discounts, for example.

Joining instructions are here.

Overview of mechanism for verifying student status

Once your organization has joined the UK federation, you can deploy and register an SP (Service Provider) entity. When someone arrives at your SP, they determine their home organization's Identity Provider (IdP) and are directed to the IdP. They authenticate. The IdP sends attributes about that person to the SP. Your SP checks that there is an eduPersonScopedAffiliation attribute which includes an affiliation of student.

This tells you:

• the person has authenticated at a specific IdP
• that IdP has asserted that the person has a student status

See Section 7 of our Technical Recommendations for Participants for more details about attributes in the UK federation.

However, a number of home organizations simply release the 'member' affiliation statically for everyone, so if students at those organizations want to be verified, they'd have to persuade their IdP to release eduPersonScopedAffiliation correctly. We therefore suggest that your SP has a standard method for the student to prompt their IdP home organization to release the appropriate attribute. For example, the IdP's metadata contains a support email address, so you could extract this information and allow the user who is a student to contact their IdP's support address to determine why they don't have a student affiliation.

Please contact the UK federation helpdesk for further details.

Is there are API that I can use to verify someone is a student?

Not currently. Please contact the UK federation helpdesk if an API would be of interest. Before you get in touch, please think about what you expect from an API and let us know. Thanks!