HKAF Policy Framework

All new and existing HKAF Members must be compliant with the HKAF Federation Policy and associated documents in all its parts.

Name Purpose
HKAF Federation Policy (PDF: 485k) Defines the Federation (HKAF) by defining the obligations and rights of the Federation Members, and the procedures and practices which allows them to use available Federation Technologies for electronic identification and for access to authorization information about End Users in the Federation
HKAF Eligibility Policy (PDF: 203k) Defines the types of membership available to organizations wishing to join HKAF, and the associated eligibility criteria
HKAF SAML WebSSO Technology Profile (PDF:168k) Describes concrete realisations of the Policy and Assurance Profiles in terms of specific technology - SAML
HKAF Attribute Profile (PDF: 201k) Defines the sets of Core and Recommended Attributes with detailed information and guidance on their values and uses that the deployment of Identity Providers and Service Providers MUST follow
HKAF Identity Provider Management Standard (PDF: 164k) Defines the rules that the deployment of Identity Provider MUST follow

HKAF Service Provider Management Standard (PDF: 167k)

 Defines the rules that the deployment of Service Provider MUST follow
HKAF Data Protection Profile (PDF: 169k) Defines the attribute processing principles that the deployment of Service Provider MUST follow
HKAF Identity Assurance Profile Describes level of trust in claims and organizations for corresponding HKAF Identity Assurance Level

Annual Compliance Statement

All existing HKAF member organizations have until 30 June of each year to ensure that they are fully compliant with the HKAF Federation Policy and to submit a HKAF Annual Compliance Statement. The HKAF Operator Team will send an advance reminder notice to member organizations that compliance statements are due by June 30.

Compliance statements are to be made on the HKAF Member Annual Compliance Statement Form being signed by the authorized personnel, and sent via email as a PDF to This email address is being protected from spambots. You need JavaScript enabled to view it. by 30 June each year.

  • Overdue Compliance Statements

The HKAF Operator Team will write to member organizations that are overdue in submitting their HKAF Member Annual Compliance Statement to determine the way forward. If you have any questions regarding your organisation’s compliance to the HKAF Federation Policy, please contact us via email at This email address is being protected from spambots. You need JavaScript enabled to view it..