- Eduperson ID / opaque identifier (what is not working for us now with the current implementations?)
- Customized release of attributes
- End user consent for releasing additional attributes
- Proactive login to shibboleth to prevent need for subsequent login (is this what Chicago is talking about with the push model?)
- Vendor/guest override built into Shibboleth