18. eduPersonEntitlement is an optional attribute that can be used to provide either a list of enrolled module codes (see FAQ question 2 at http://support.talisaspire.com/entries/382415-devolved-authentication-guidelines-for-talis-aspire), or devolved constraints (see http://support.talisaspire.com/entries/445432-implementing-devolved-constraints) to Talis Aspire.