Guidelines for expressing community user identifiers (AARC-G026)

This document provides guidelines for expressing Community User Identifiers (CUIDs) such that the identifier values can be transported in an interoperable way across AARC Blueprint Architecture (BPA) compliant Authentication & Authorisation Infrastructures (AAIs). The CUID is a subject identifier, where the subjects are generally but not exclusively natural persons. The community user identifier is an attribute of the subject’s digital identity which is managed by the Community AAI. The guidelines specify how the CUID is communicated from the Community AAI to its connected services, i.e. infrastructure services (accessible through Infrastructure Proxies), generic and community services.