---
type: concept
title: Identity Card
tags: ["privacy", "authentication", "consent", "shibboleth"]
related: [shibboleth]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_shibboleth.md", "output/rz_uni_greifswald_de_dienste_allgemein_shibboleth_loginvorgang.md"]
---

# Identity Card

In the context of [[shibboleth]], the **Identity Card** (or ID-Card) is a summary screen and privacy interface presented to the user after successful authentication but before access to a service is granted. It serves as a transparency mechanism to inform users exactly which personal attributes are being transmitted to the service provider.

## Functionality
The Identity Card lists all the specific user data (attributes) that the service provider has requested and that will be transmitted upon confirmation.

- **Consent**: Users must explicitly confirm the transfer of the list of attributes before the data is sent.
- **Revocation/Cancellation**: Users can cancel the process at this stage to prevent data transmission or withdraw their attribute consent for a specific service during the login process.
- **Anonymity**: This mechanism helps ensure user privacy by preventing the automatic, invisible transfer of personal data to third-party providers.

## Scope and Exclusions

### Service Scope
The ID-Card only appears for external services. Internal university services bypass this interface as they operate under the university's data protection statutes.

### Data Exclusions
Not all transmitted data appears on the ID-Card. Technical authorization attributes are sent automatically and are excluded from the card:
- `eduPersonEntitlement`
- `eduPersonAffiliation`
- `eduPersonScopedAffiliation`