eduPersonScopedAffiliation (ePSA) is a potentially multi-valued attribute reflecting the authenticated user's association with the IdP's organisation. The possible data values are fixed, and are student, staff, faculty, employee, member, affiliate, and alum. It is expected that member will include anyone who is also student, staff, faculty, or employee.
It is expected that for many applications, examination of this attribute should be sufficient to determine whether the user has sufficient privilege to access the resource.