CalNet rSPA Test Accounts
Overview
If you are a campus developer and would like to use rSPA Test accounts, email calnet-admin@berkeley.edu and indicate that you would like to be added to the rSPA access group.
rSPA Test accounts mimic active CalNet accounts for common use cases, such as employee, faculty, and registered student. rSPAs are a new, more secure way to test your application using Special Purpose Account infrastructure to allow direct members of the rSPA access group to log in using their own passphrase. You must be added to the rSPA access group in order to use these accounts.
PLEASE NOTE: Each test account is flagged as such in the CalNet Directory by the presence of the berkeleyEduTestIDFlag attribute. Any CalNet Directory entry with the berkeleyEduTestIDFlag attribute IS A TEST ENTRY. All CalNet Applications should test for the presence of the berkeleyEduTestIDFlag attribute (after verifying CAS Authentication), and should restrict access as appropriate.
Note: Universal Test IDs, which were previously usable for testing, have been retired.
Listing of the current rSPAs
| CalNet ID | Description | Key selected attribute values |
|---|---|---|
spa-faux-employee-staff |
Employee, Staff | uid: 12012723 berkeleyEduAffiliations: EMPLOYEE-TYPE-STAFF employeeNumber: 019999944 berkeleyEduUCPathID: 019999944 berkeleyEduAlternateID: spa-faux-employee-staff@berkeley.edu mail: spa-faux-employee-staff@berkeley.edu |
spa-faux-employee-faculty |
Employee, Faculty | uid: 12012735 berkeleyEduAffiliations: EMPLOYEE-TYPE-ACADEMIC employeeNumber: 019999945 berkeleyEduUCPathID: 019999945 berkeleyEduAlternateID: spa-faux-employee-faculty@berkeley.edu mail: spa-faux-employee-faculty@berkeley.edu |
spa-faux-student-not-registered |
Student, Not Registered | uid: 12012740 berkeleyEduAffiliations: STUDENT-TYPE-NOT-REGISTERED berkeleyEduStuID: 9999999997 berkeleyEduCSID: 9999999997 berkeleyEduAlternateID: spa-faux-stu-not-reg-01@berkeley.edu mail: spa-faux-stu-not-reg-01@berkeley.edu |
spa-faux-affiliate-staff-retiree |
Affiliate, Staff Retiree | uid: 12012741 berkeleyEduAffiliations: AFFILIATE-TYPE-STAFF RETIREE berkeleyEduAffID: spa12012741 berkeleyEduAlternateID: spa-faux-affiliate-staff-retiree@berkeley.edu mail: spa-faux-affiliate-staff-retiree@berkeley.edu |
spa-faux-affiliate-visiting-sch |
Affiliate, Visiting Scholar | uid: 12012742 berkeleyEduAffiliations: AFFILIATE-TYPE-VISITING SCHOLAR berkeleyEduAffID: spa12012742 berkeleyEduUCPathID: 019999944 berkeleyEduAlternateID: spa-faux-affiliate-visiting-sch@berkeley.edu mail: spa-faux-affiliate-visiting-sch@berkeley.edu |
spa-faux-affiliate-advcon-alumnus |
Affiliate, Advcon Alumnus | uid: 1754155 berkeleyEduAffiliations: AFFILIATE-TYPE-ADVCON-ALUMNUS berkeleyEduAffiliations: AFFILIATE-TYPE-ADVCON-ATTENDEE berkeleyEduAffiliations: AFFILIATE-TYPE-ADVCON-CAA-MEMBER berkeleyEduAffID: spa12016242 berkeleyEduUCPathID: 019999944 berkeleyEduAlternateID: spa-faux-affiliate-visiting-sch@berkeley.edu mail: spa-faux-affiliate-visiting-sch@berkeley.edu |
spa-faux-stu-delegate |
Stu Delegate | uid: 1754156 berkeleyEduAffiliations: STU-DELEGATE berkeleyEduAffID: spa12016243 mail: spa-faux-stu-delegate@berkeley.edu |
spa-faux-former-student |
Former Student | uid: 1754157 berkeleyEduAffiliations: FORMER-STUDENT berkeleyEduAffID: spa12016244 berkeleyEduAlternateID: spa-faux-former-student@berkeley.edu mail: spa-faux-affiliate-visiting-sch@berkeley.edu berkeleyEduStuID: 9999999997 berkeleyEduCSID: 9999999997 |
spa-faux-stu-reg-01 |
Student, Registered | uid: 12012992 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012992 berkeleyEduAlternateID: spa-faux-stu-reg-01@berkeley.edu berkeleyEduStuID: 9999999996 berkeleyEduCSID: 9999999996 |
spa-faux-stu-reg-02 |
Student, Registered | uid: 12012993 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012993 berkeleyEduAlternateID: spa-faux-stu-reg-02@berkeley.edu berkeleyEduStuID: 9999999995 berkeleyEduCSID: 9999999995 |
spa-faux-stu-reg-03 |
Student, Registered | uid: 12012994 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012994 berkeleyEduAlternateID: spa-faux-stu-reg-03@berkeley.edu berkeleyEduStuID: 9999999994 berkeleyEduCSID: 9999999994 |
spa-faux-stu-reg-04 |
Student, Registered | uid: 12012995 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012995 berkeleyEduAlternateID: spa-faux-stu-reg-04@berkeley.edu berkeleyEduStuID: 9999999993 berkeleyEduCSID: 9999999993 |
spa-faux-stu-reg-05 |
Student, Registered | uid: 12012996 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012996 berkeleyEduAlternateID: spa-faux-stu-reg-05@berkeley.edu berkeleyEduStuID: 9999999992 berkeleyEduCSID: 9999999992 |
spa-faux-affiliate-indep-ctr-cons |
Affiliate, Independent Contractor, Consultant | uid: 1785820 berkeleyEduAffiliations: AFFILIATE-TYPE-INDEPENDENT-CONTRACTOR-CONSULTANT berkeleyEduAffID: spa12016490 berkeleyEduAlternateID: spa-faux-affiliate-indep-ctr-cons@berkeley.edu berkeleyEduUCPathID: 019999990 |
spa-faux-aff-visiting-stu-research |
Affiliate, Visiting Student Researcher | uid: 1831718 berkeleyEduAffiliations: AFFILIATE-TYPE-VISITING STU RESEARCHER berkeleyEduAffID: spa12012996 berkeleyEduAlternateID: spa-faux-aff-visiting-stu-research@berkeley.edu berkeleyEduUCPathID: 019999944 berkeleyEduCSID: 9999999995 |
Values for berkeleyEduIsMemberOf in the directory
| UID | CNID | berkeleyEduIsMemberOf values (BE == dc=berkeley,dc=edu) |
|---|---|---|
| 12012723 | spa-faux-employee-staff |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
| 12012735 | spa-faux-employee-faculty |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
| 12012740 | spa-faux-student-registered |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
(Note: Remaining stu-reg-01 through 05 entries follow the standard pattern of group memberships shown above).
Values stored in BPR/CAT for uid=12012723
Basic Information data
Name: Faux-employee-staff SP_Account
Calnet Affiliate Id: spa12012723
CalNet ID: spa-faux-employee-staff
Roles: ldapNoExpDate, calnetAffilCalnetAffiliate, masterAccountActive, ouPeople
Sample CAS client web application results display
The following table shows the properties and attribute values returned by the CAS server to a sample CAS client app hosted at the URL https://casclient-prod.calnet.berkeley.edu when accessed using the spa-faux-employee-staff rSPA test account.
Authenticated User Id: 12012723
| Key | Value |
|---|---|
| samlAuthenticationStatementAuthMethod | urn:oasis:names:tc:SAML:1.0:am:password |
| credentialType | UsernamePasswordCredential |
| uid | 12012723 |
| isFromNewLogin | true |
| bypassMultifactorAuthentication | false |
| authnContextClass | mfa-duo |
| authenticationMethod | campus |
| berkeleyEduIsMemberOf |
|
| berkeleyEduAffiliations | Multi-valued attribute:
|