Consent with CAS

[Marvin Addison]

> It's necessary but not sufficient.
>

Created https://issues.shibboleth.net/jira/browse/IDP-742 to track. I guess
we'll deal with other requirements on that issue as they arise.

requiring a server-side consent store like JPA or memcached?
>
> Memcache is not an appropriate choice, but yes, any is supported.


Good to know they're all supported. As for suitability of memcache for
storing user consent preferences, I think it could be suitable under some
circumstances:

1. It's permissible by policy to allow user consent preferences to expire
prior to configured TTL.
2. Memcached service is reliable.
3. Memcached service is tuned to avoid evictions.

Thus preferences can be lost by policy, but it would be uncommon in
practice.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150615/59076076/attachment.html>