Consent Form & eduPersonTargetedId

[Tom Zeller]

Moving over to the dev list...

> Databases are almost always a single point of failure, and I don't use one with my IdP. The IdP comes with the configuration I advocate. The fact that it doesn't support consent other than per-device is because I value statelessness over virtually every other consideration and think it is the best choice for the majority of sites.

FWIW I think at an I2MM this came up, and I think I said something
like : well, a ChainingStorageService which writes to both server-side
_and_ client-side storage might be both stateless and synchronized (vs
per-device). I think some intelligence would be needed to determine
which version (client-side or server-side) would win if they differ,
but I imagine that logic is straightforward.