Shibboleth Developers

["RL 'Bob' Morgan" <>]

On Wed, 13 Apr 2011, Bradley Beddoes wrote:

> On a related note our usage of IdP attribute filtering and uApprove 
> together within the AAF has been very effective. Using (in our case) 
> automatically generated attribute filters with our IdPs combined with 
> user consent is a strategy we'll certainly be taking forward. It forms 
> part of our compliance to Australian privacy law which in layman terms 
> requires both minimal disclosure and the ability for users to approve 
> transfer of PII before it actually occurs.

Interesting stuff.  Probly OT for shib-dev, but:

"automatically generated attribute filters" are automatically generated 
where?  By the federation management system?

Are all IdPs required to use these filters or just highly motivated due to 
the compliance issue?

Thanks,

 - RL "Bob"