Introducing rSPAs - Restricted Special Purpose Accounts for application testing.
If you are a campus developer and would like to use rSPA Test accounts, email calnet-admin@berkeley.edu and indicate that you would like to be added to the rSPA access group.
rSPA Test accounts mimic active CalNet accounts for common use cases, such as employee, faculty, and registered student. rSPAs are a new, more secure way to test your application using Special Purpose Account infrastructure to allow direct members of the rSPA access group to log in using their own passphrase. You must be added to the rSPA access group in order to use these accounts.
PLEASE NOTE: Each test account is flagged as such in the CalNet Directory by the presence of the berkeleyEduTestIDFlag attribute. Any CalNet Directory entry with the berkeleyEduTestIDFlag attribute IS A TEST ENTRY. All CalNet Applications should test for the presence of the berkeleyEduTestIDFlag attribute (after verifying CAS Authentication), and should restrict access as appropriate.
Contact CalNet Administrators at calnet-admin@berkeley.edu for more information
Note: Universal Test IDs, which were previously usable for testing have been retired.
Shared attributes for all test accounts
berkeleyEduTestIDFlag: TRUE
berkeleyEduAffiliations: AFFILIATE-TYPE-SPA
berkeleyEduAffiliations: AFFILIATE-TYPE-TEST
Listing of the current rSPAs
CalNet ID | Description | Key selected attribute values |
spa-faux-employee-staff | Employee, Staff |
uid: 12012723 berkeleyEduAffiliations: EMPLOYEE-TYPE-STAFF employeeNumber: 019999944 berkeleyEduUCPathID: 019999944 berkeleyEduOfficialEmail: spa-faux-employee-staff @berkeley.edu mail: spa-faux-employee-staff @ berkeley.edu |
spa-faux-employee-faculty | Employee, Faculty |
uid: 12012735 berkeleyEduAffiliations: EMPLOYEE-TYPE-ACADEMIC employeeNumber: 019999945 berkeleyEduUCPathID: 019999945 berkeleyEduOfficialEmail: spa-faux-employee-faculty @ berkeley.edu mail:spa-faux-employee-faculty @ berkeley.edu |
spa-faux-student-not-registered | Student, Not Registered |
uid: 12012740 berkeleyEduAffiliations: STUDENT-TYPE-NOT-REGISTERED berkeleyEduStuID: 9999999997 berkeleyEduCSID: 9999999997 berkeleyEduOfficialEmail: spa-faux-stu-not-reg-01 @ berkeley.edu mail: spa-faux-stu-not-reg-01 @ berkeley.edu |
spa-faux-affiliate-staff-retiree | Affiliate, Staff Retiree |
uid: 12012741 berkeleyEduAffiliations: AFFILIATE-TYPE-STAFF RETIREE berkeleyEduAffID: spa12012741 berkeleyEduOfficialEmail: spa-faux-affiliate-staff-retiree @ berkeley.edu mail: spa-faux-affiliate-staff-retiree @ berkeley.edu |
spa-faux-affiliate-visiting-sch | Affiliate, Visiting Scholar |
uid: 12012742 berkeleyEduAffiliations: AFFILIATE-TYPE-VISITING SCHOLAR berkeleyEduAffID: spa12012742 berkeleyEduUCPathID: 019999944 berkeleyEduOfficialEmail: spa-faux-affiliate-visiting-sch @ berkeley.edu mail: spa-faux-affiliate-visiting-sch @ berkeley.edu |
spa-faux-affiliate-advcon-alumnus | Affiliate, Advcon Alumnus |
uid: 1754155 berkeleyEduAffiliations: AFFILIATE-TYPE-ADVCON-ALUMNUS berkeleyEduAffID: spa12016242 berkeleyEduUCPathID: 019999944 berkeleyEduOfficialEmail: spa-faux-affiliate-visiting-sch @ berkeley.edu mail: spa-faux-affiliate-visiting-sch @ berkeley.edu |
spa-faux-stu-delegate | Stu Delegate |
uid: 1754156 berkeleyEduAffiliations: STU-DELEGATE berkeleyEduAffID: spa12016243 mail: spa-faux-stu-delegate @ berkeley.edu |
spa-faux-former-student | Former Student |
uid: 1754157 berkeleyEduAffiliations: FORMER-STUDENT berkeleyEduAffID: spa12016244 berkeleyEduOfficialEmail: spa-faux-former-student @ berkeley.edu mail: spa-faux-affiliate-visiting-sch @ berkeley.edu berkeleyEduStuID: 9999999997 berkeleyEduCSID: 9999999997 |
spa-faux-stu-reg-01 | Student, Registered |
uid: 12012992 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012992 berkeleyEduOfficialEmail: spa-faux-stu-reg-01@berkeley.edu berkeleyEduStuID: 9999999996 berkeleyEduCSID: 9999999996 |
spa-faux-stu-reg-02 | Student, Registered |
uid: 12012993 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012993 berkeleyEduOfficialEmail: spa-faux-stu-reg-02@berkeley.edu berkeleyEduStuID: 9999999995 berkeleyEduCSID: 9999999995 |
spa-faux-stu-reg-03 |
Student, Registered |
uid: 12012994 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012994 berkeleyEduOfficialEmail: spa-faux-stu-reg-03@berkeley.edu berkeleyEduStuID: 9999999994 berkeleyEduCSID: 9999999994 |
spa-faux-stu-reg-04 | Student, Registered |
uid: 12012995 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012995 berkeleyEduOfficialEmail: spa-faux-stu-reg-04@berkeley.edu berkeleyEduStuID: 9999999993 berkeleyEduCSID: 9999999993 |
spa-faux-stu-reg-05 | Student, Registered |
uid: 12012996 berkeleyEduAffiliations: STUDENT-TYPE-REGISTERED berkeleyEduAffID: spa12012996 berkeleyEduOfficialEmail: spa-faux-stu-reg-05@berkeley.edu berkeleyEduStuID: 9999999992 berkeleyEduCSID: 9999999992 |
Values for berkeleyEduIsMemberOf in the directory
UID | CNID | berkeleyEduIsMemberOf values (BE == dc=berkeley,dc=edu) |
12012723 | spa-faux-employee-staff |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
12012735 | spa-faux-employee-faculty |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
12012740 | spa-faux-student-registered |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
12012741 | spa-faux-affiliate-staff-retiree |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
12012742 | spa-faux-affiliate-visiting-sch |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,BE cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,BE cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,BE cn=edu:berkeley:official:all-accounts,ou=campus groups,BE cn=edu:berkeley:official:spas,ou=campus groups,BE cn=edu:berkeley:official:test-accts,ou=campus groups,BE |
12012992 | spa-faux-stu-reg-01 |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:wifi:WiFi-Users,ou=campus groups, dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-licensed-productivity-suite,ou=campus groups,dc=berkeley,dc=edu berkeleyEduIsMemberOf: cn=edu:berkeley:app:zoom:zoom-sponsored-eligible,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:all-accounts,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:spas,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:test-accts,ou=campus groups, dc=berkeley,dc=edu |
12012993 | spa-faux-stu-reg-02 |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:wifi:WiFi-Users,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-licensed-productivity-suite,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-sponsored-eligible,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:all-accounts,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:spas,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:test-accts,ou=campus groups, dc=berkeley,dc=edu |
12012994 | spa-faux-stu-reg-03 |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:wifi:WiFi-Users,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-licensed-productivity-suite,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-sponsored-eligible,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:all-accounts,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:spas,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:test-accts,ou=campus groups, dc=berkeley,dc=edu |
12012995 | spa-faux-stu-reg-04 |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:wifi:WiFi-Users,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-licensed-productivity-suite,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-sponsored-eligible,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:all-accounts,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:spas,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:test-accts,ou=campus groups, dc=berkeley,dc=edu |
12012996 | spa-faux-stu-reg-05 |
cn=edu:berkeley:app:auth-cas:box_app:box_app-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:g_suite:g_suite-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:auth-cas:webapp-default:webapp-default-access,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:wifi:WiFi-Users,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-licensed-productivity-suite,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:app:zoom:zoom-sponsored-eligible,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:affiliates:aff-test,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:all-accounts,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:spas,ou=campus groups,dc=berkeley,dc=edu cn=edu:berkeley:official:test-accts,ou=campus groups, dc=berkeley,dc=edu |
Values stored in BPR/CAT for uid=12012723
Basic Information data
Name: Faux-employee-staff SP_Account
Calnet Affiliate Id: spa12012723
CalNet ID: spa-faux-employee-staff
Roles: ldapNoExpDate, calnetAffilCalnetAffiliate, masterAccountActive, ouPeople
Sample CAS client web application results display
The following table shows the properties and attribute values returned by the CAS server to a sample CAS client app hosted at the URL https://webapp.calnet.berkeley.edu/webapp-auth-vip when accessed using the spa-faux-employee-staff rSPA test/fake/faux account.
Authenticated User Id: 12012723
Attributes |
|
Key |
Value |
samlAuthenticationStatementAuthMethod |
Multi-valued attribute: 2
|
credentialType |
Multi-valued attribute: 2
|
uid |
12012723 |
isFromNewLogin |
true |
bypassMultifactorAuthentication |
false |
authenticationDate |
2019-05-03T16:56:13.607-07:00[America/Los_Angeles] |
authnContextClass |
mfa-duo |
authenticationMethod |
Multi-valued attribute: 2
|
successfulAuthenticationHandlers |
Multi-valued attribute: 2
|
berkeleyEduIsMemberOf |
Multi-valued attribute: 7
|
berkeleyEduAffiliations |
Multi-valued attribute: 3
|
longTermAuthenticationRequestTokenUsed |
false |