NameID from Subject

[Manuel Haim]

Hi Lukas,

just one question to uApprove usage here:

> Therefore, not only the liveness of a user can be checked
> but the SP will get the most-up-to-date attributes from that user.
>
> The user must have accessed the SP at least once (and depending on the
> IdP he had to also consent that his attributes are released to this SP).

I thought that uApprove also stores hashed attribute values, and the
user must give his consent again if any values have changed. So what
happens if you query attributes from a user whose attributes have
changed since his last consent?

Kind regards,
Manuel