...
The URL pointing to the Privacy Policy must be published in the Metadata of the Service Provider, like in this example:
| Code Block | ||||
|---|---|---|---|---|
| ||||
<md:EntityDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
entityID="https://wiki.edugain.org/shibboleth"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
[ ... ]
<SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
<Extensions>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:PrivacyStatementURL xml:lang="en">https://wiki.edugain.org/eduGAIN:Privacy_policy</mdui:PrivacyStatementURL>
[ ... ]
</mdui:UIInfo>
</Extensions>
[... More SAML metadata ...] |
...