SAML Privacy-Enhancing Profile
Moritz Horsch, Max Tuengerthal, Tobias Wich
Open Identity Summit 2014
Abstract
We present the SAML Privacy-Enhancing (PE) profile which empowers users to take control of the authentication process and their personal data. Users have the full control of the application flow and get detailed information about the involved participants and the revealed attributes. This enables users to give informed consent for the authentication. The new profile builds on well-established standards and technologies. We use the common SAML Authentication Request and provide the additional information as extensions based on SAML Metadata.
[PDF]