Under proposal is a new “browserbased attribute exchange” (BBAE) protocol, which is more privacy-friendly than earlier proposals and can scale better to multiple enterprise federations without a single point of control.