Federated Access Control

• Users authenticate their unique identity to their home institutions

• Due to contractual relationships, services trust the institution to reveal previously negotiated information (attributes) about users, but no more

• Users and institutions share control over attribute release