Shibboleth

• Attribute Authority at the origin site.

• Shib keeps user anonymous to the target site,

• But the origin site AA sees everywhere he goes, when it receives attribute requests from target sites.