The information might be valuable
for the IP to protect, might compromise user privacy, or
What Does an Identity Provider Have to Offer?
336 Identity Providers
might not be of value to any RP. The information also
might not be distilled to an easily consumable format for
the RP and might be transformed to a more usable claim
set before being exposed.
How will the customer feel about sharing this information?
Even if an RP and an IP work out a collection of claims
that would be valuable to share, the user is still in control
??”when users present a card, they have the opportunity
to inspect the data before sending the token along to
the RP. If your users are not comfortable sending along
information that is of a personal or private nature and
would balk at using such a card, perhaps including them
is not the best use of time and resources.
Industry standardization may play a large role in the card
schema, too??”there could be an opportunity for a collation of
IPs or partners to get together to build a common declaration of
cards for their speci?¬?c industry.
Identity Provider Reputation
As an IP, an organization builds on the strength of its own identity
and begins to service two distinctive sets of customers: the
users and the RPs.
Pages:
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483