v3 consent to attribute release : more than per entity ID ?

Tom Zeller tzeller at dragonacea.biz
Fri Sep 5 16:15:54 EDT 2014


On a recent dev call, I asked if consent to release an attribute for a
given relying party would apply to other relying parties, and the
response was pretty much no, which is understandable given how I
asked. However, I came across IDP-96 again, which is a request for
consent to be applied to more than one entity based on some criteria,
probably from metadata.

I bring this up because of client-side storage concerns. If we
supported IDP-96, then it seems we could store the criteria for
matching a relying party in some way besides entity ID to reduce
storage size. But I'm not sure how to do that.

So, I guess my question is, should consent storage be keyed by entity
ID, or something else ? My assumption is that storage should be
per-entity ID, and applying consent to more-than-one entity would be
done by a configured predicate of some sort.

Thoughts ?


More information about the dev mailing list