| Note |
|---|
June 6, 2023 - This is an updated copy of the document: CCCID: The Use & Significance of the CCCID in the CCC SSO Initiative. Pending approval, it will replace the original. |
...
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
See below: What information do students need to create their OpenCCC account? |
CCCID Facts
The CCCID is unique to each individual student
The CCCID is generated when the student/user creates an OpenCCC account
The CCCID is used to identify the student during sign-on by systemwide technology applications
The CCCID is securely stored in a systemwide identity management system and delivered to the college via SuperGlue for Apply or via Data Warehouse Direct Connect service
The CCCID can be used for student identification and deduplication by the college
The CCCID is the mandated student identifier for every California Community College student
...
The EduPersonPrincipalName (EPPN) is the unique identifier for a user (applicant, student, faculty, staff) across all college IdPs.For the the Student population, a Central OpenCCC Id (CCCID) is a unique correlation ID for a single student across the entire CCC system and is a key SAML attribute requirement across all service providers. Many colleges will be able to lookup the CCCID from their directory servers, but for the colleges that don't store CCCID, the central IdP proxy will be used to lookup the CCCID for a given EPPN and included it in the list of SAML attributes sent to the final Service Provider.
The EPPN has the syntax of an email address, but it should be considered a "globally unique federated identifier" rather than an email address. It is generally the most important attribute to be shared with federated services. Note that the value of EPPN does not have to match what the user enters as their username when they login, and the user does not need to know what their EPPN is, as it is shared between the IdP and the service. It should be unique, rarely change, and not be reassigned to another user.
...
The significance of the EPPN to the CCC SSO Federation
The EduPersonPrincipalName (EPPN) is the unique identifier for a user for across all college IDPs.
For the the Student population, an OpenCCC Account Id a California Community College ID (CCCID) is a unique correlation ID for ID for a single student across then the entire CCC system and is a key SAML attribute requirement across all service providers. Many colleges will be able to lookup the CCCID from their directory servers, but for the colleges that don't store CCCID, the SSO Proxy central IdP proxy will be used to lookup the CCCID for a given EPPN and included it in the list of SAML attributes sent to the final Service Provider.