Management Phase 2: Shibboleth as Attribute Delivery for Authorization

Often, the next step is to enable passing of attribute information about a user to an application for use in making local authorization decisions. While conceptually similar to having the application retrieve this information from an enterprise directory, using Shibboleth provides management advantages. This session will explore the changes to policy and business process related to providing this attribute data, strategies for working with the data stewards, the policies governing the release of this information, and the management of this information by applications.