Shibboleth Developers

[Tom Scavo <>]

On Tue, Apr 12, 2011 at 8:28 PM, Cantor, Scott E. 
<>
 wrote:
> On 4/12/11 8:17 PM, "Bradley Beddoes" 
> <>
>  wrote:
>
>>Overall the important component of this discussion is that for us
>>having the ability to provide users with a description in the consent
>>UI of how the service will utilize each piece of the PII they are
>>going to release would be highly desirable.
>
> That's what ServiceDescription is for.

The <md:ServiceDescription> element in metadata gives a *short*
description (say, a paragraph) of the service. If the service provider
needs to elaborate on that description, the optional
<mdui:InformationURL> extension element may be used to point to a web
page with more detailed information. On the other hand, the
<mdui:PrivacyStatementURL> element contains a pointer to the SP
Privacy Policy document. Content creators will appreciate the ability
to create separate documents for these purposes. (Think about how the
Privacy Policy is exposed on a typical web site.)

That's my take on it, for what it's worth.

Tom