1. Eduperson ID / opaque identifier (what is not working for us now with the current implementations?)
  2. Customized release of attributes
  3. End user consent for releasing additional attributes
  4. Proactive login to shibboleth to prevent need for subsequent login (is this what Chicago is talking about with the push model?)
  5. Vendor/guest override built into Shibboleth
  • No labels