7 documents tagués avec "privacy"

Roadmap: optional enriched claims beyond standard OIDC profile - organisation, age brackets, residency, postal address - each requiring explicit user consent.

How the LuxID consent screen works, what your application name and logo contribute, per-claim labelling, and tone-of-language guidance.

GDPR guidance for LuxID Partners: controller and processor roles, lawful basis, data minimisation, user rights, breach notification and cross-border transfers.

LuxID Agreement structure, why no separate DPA is needed, privacy notice template and brand usage terms for LuxID integrations.

Architectural decisions to make before writing production code: protocol, required auth_level, MFA, Sphere, session strategy, logout, and branding.

Data minimisation, explicit consent, revocability, Sphere-based pseudonymisation, and GDPR alignment in LuxID.

The LuxID domain model: User, Organisation, Partner, Application, Sphere, Subscription, Group, Claim, Consent, and Federation explained with worked examples.