WAYF, Danish eID federation, hub-and-spoke, thoughts and comments
Category Archives: Federation architecture
Metadata is the ‘configuration’ of the identity federation. In a point-to-point-federation, where all entities must know each other, the configuration needs to be updated at all entities at regular intervals. Thus the name ‘metadata’. In a hub-and-spoke model, like WAYF, … Continue reading
When users consent to data exchange, the consent dialogue must be ‘informed’. This means the user must understand what is going on. A tall order… The amount of personal information (the attribute release policy) must be balanced with the ‘purpose’ … Continue reading
I saw a mail where Scott Cantor said that identity proxies (to his big regret?) might be the only way to make consent to data transfers scalable. Operating a federation hub I’ll just add to Scott’s statement that ensuring that … Continue reading