v3 consent to attribute release : "always require consent" ?

Nate Klingenstein ndk at internet2.edu
Thu Oct 9 17:39:04 EDT 2014


Yes, I think this would be a really helpful thing to support, for attributes and maybe even terms of use.  It'd be great if the administrator could specify "Always Require Consent" as something like an AttributeRule to a PolicyRule as needed.

On Oct 9, 2014, at 3:34 PM, Tom Zeller <tzeller at dragonacea.biz> wrote:

> Do we want to implement "always require consent" in v3 ?
> 
> The "always require consent" feature would, I guess, always prompt the
> user for consent even if consent was already given. I do not believe
> this feature is in uApprove, but it looks some work was done on it
> already in v3.
> 
> FWIW, uApproveJP does have a related feature implemented as a toggle
> the user can select to be prompted again for consent the next time
> they login.
> 
> Implementation would probably involve setting the lifetime of the
> consent storage record to 0.
> 
> Thanks.
> -- 
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net



More information about the dev mailing list