SURFconext has a minimal disclosure principle: only the absolute necessary (personal) information is transferred to a service. When you request a connection to the Production environment, you must specify the attributes needed. SURFconext Support will review your request and configure an Attribute Release Policy accordingly.
When Identity Providers are asked if they want to be coupled to your service, they will be informed of the attributes your service requests. The IdP must agree to the release of these attributes to your service. |