[JIRA] (IDP-1920) Attribute release activation condition is SAML-specific.

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-1920 ( https://shibboleth.atlassian.net/browse/IDP-1920?atlOrigin=eyJpIjoiMmJjMTdhOWRiNTJlNDMxNGIzMDFhODQ5MzY2NjExOWMiLCJwIjoiaiJ9 )

Re: Attribute release activation condition is SAML-specific. ( https://shibboleth.atlassian.net/browse/IDP-1920?atlOrigin=eyJpIjoiMmJjMTdhOWRiNTJlNDMxNGIzMDFhODQ5MzY2NjExOWMiLCJwIjoiaiJ9 )

There is a second hole in all this, which Henri already filed, about the problems with one-time approval of consent not working on the back-channel, though it can work with OIDC. But this doesn’t work for SAML either, and our condition there doesn’t prevent it. The flow would still be enabled for SAML SSO but with no consent record stored, and the query would thus fail to find it and block release, which is what the original condition was sort of trying to “prevent”, but in fact doesn’t.

( https://shibboleth.atlassian.net/browse/IDP-1920#add-comment?atlOrigin=eyJpIjoiMmJjMTdhOWRiNTJlNDMxNGIzMDFhODQ5MzY2NjExOWMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1920#add-comment?atlOrigin=eyJpIjoiMmJjMTdhOWRiNTJlNDMxNGIzMDFhODQ5MzY2NjExOWMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:81e20ed )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/e1940e6e/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-829776e4-d791-46c6-ad24-7911145b5dd7
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/e1940e6e/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-59a906ea-1b35-4bcc-a715-35496c13647e
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/e1940e6e/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f27c6d4d-c875-4919-a3a1-60f0d532bb2b
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220314/e1940e6e/attachment-0005.png>