manage (view, revoke) consent in IDP

[Cantor, Scott]

> Are there any plans to provide a UI within the IDP to manage (i.e., display and
> optionally revoke) previously created and still active consent records in
> whatever storage service is active? E.g.:

We were essentially told by Internet2 that they would provide a stand alone consent system and we shouldn't be investing time on ours. I realize that that isn't an answer but that's what we were told and it's how we decided where to spend our time.

That doesn't mean the decision can't change, but so far nothing has been discussed amongst the board to decide how to proceed on this.

> With HTTP Cookies and HTML5 LocalStorage options available the IDP really is
> the best (or only) one that could handle this, I think.

Well, I think that's somewhat of an outlier. It's there, but I don't think it's really been used and it was more an existence proof that it could be done and the storage layer was fully generic. The feedback I got was that people don't view it as a serious option.

But the bigger issue is that we don't document the layout. We won't do that, so any attempt to externalize the work would depend on adding a REST API to get at the data or some other interchange mechanism or API to manipulate it.

-- Scott