SAML Privacy-Enhancing Profile

Moritz Horsch, Max Tuengerthal, Tobias Wich

Open Identity Summit 2014


Abstract

We present the SAML Privacy-Enhancing (PE) profile which empowers users to take control of the authentication process and their personal data. Users have the full control of the application flow and get detailed information about the involved participants and the revealed attributes. This enables users to give informed consent for the authentication. The new profile builds on well-established standards and technologies. We use the common SAML Authentication Request and provide the additional information as extensions based on SAML Metadata.

[PDF]

Tags: