Autograph makes privacy in a Shibboleth® federation transparent and manageable. It allows members of an Identity Provider (e.g. students of a university) to configure their own Attribute Release Policy, or, in Autograph terms, their own idCards.

Utilizing Autograph Shibboleth obeys the first two of Kim Cameron's "Laws of Identity":
It reveals personal information only with the user's consent and it discloses only the information which is needed.