...
University of California, Davis as of 9 August 19 September 2011
(based on the POP submitted to InCommon on 19 July 2007; wording updated to the 8 Feburary 2008 InCommon POP template.)
...
Service Providers are trusted to ask for only the information necessary to make an appropriate access control decision, and to not misuse information provided to them by Identity Providers. Service Providers must describe the basis on which access to resources is managed and their practices with respect to attribute information they receive from other Participants.
4. Other Information
4.1 Technical Standards, Versions and Interoperability
...