Registration - 4.1 Add policy_url

How about adding this to registration:

policy_url: A URL which the Consumer provides to give the End User a place to read about the how the profile data will be used. The Identity Provider SHOULD display this URL to the End User if it is given.

That keeps us on a par with sreg functionality.

We do have NSTIC in the US who also expect a way to display purpose of collection.

Trust frameworks and LoA can then refine it.

documenting it now in registration will save work later.

Per authentication requests should be an extension.

Would that work for EU?

John

Comments (3)