Adding an activation condition to an intercept flow ?

[Takeshi NISHIMURA]

Hi all,

Even after attributes are pushed, the SP can obtain attributes through Attribute Query interface. Right?

If the latter attributes are different from the former with per-attribute consent, it may be unexpected behavior of IdP.

Regards,
Takeshi

On 2016/03/31 2:23, Tom Zeller wrote:
> http://svn.shibboleth.net/view/java-identity-provider?view=revision&revision=7103
>
> "For the time being, I implemented a condition that disables the flow by
> default if attributes aren't pushed and the per-attribute consent option
> is on. That doesn't do what the Gakunin fork did, but it maintains the