diff --git a/CHANGELOG.md b/CHANGELOG.md
index 496ff07..40f9cd9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to
 
 ## Unreleased
 - upgrade to SATOSA 8.5.1
+- allow faculty, staff, employee, researcher, teacher affiliations
 
 ## [1.0.5] - 2025-03-06
 - add allowlist for URL paths to nginx ingress
diff --git a/src/satosa/plugins/microservices/attribute_authorization.yaml b/src/satosa/plugins/microservices/attribute_authorization.yaml
index cf1a67b..41b6ddd 100644
--- a/src/satosa/plugins/microservices/attribute_authorization.yaml
+++ b/src/satosa/plugins/microservices/attribute_authorization.yaml
@@ -13,4 +13,8 @@ config:
           # later in the PrimaryIdentifier processor.
           - ".+"
         eduPersonAffiliation:
+          - "^faculty$"
+          - "^staff$"
           - "^employee$"
+          - "^researcher$"
+          - "^teacher$"