An identity data custodian is likely in todays highly federated and out-sourced infrastructures No longer is it possible to have all data managed and stored by an infrastructure belonging to either the data owner or service provider