user consent, which SPs should trigger these screens ?

[Cantor, Scott]

On 12/2/15, 3:05 PM, "users on behalf of Steven Carmody" <users-bounces at shibboleth.net on behalf of steven_carmody at brown.edu> wrote:



>-- always present the Consent screen to every student who has opt'ed out
>under FERPA. This rule overrides all of the others.

That's the principal target I have for this feature.

Non-directory data is almost always handled by contract and doesn't need consent, and directory data is not an issue for us except for that population. So that keeps the scenario very limited and allows very targeted UI, which solves a lot of the usual concerns. I don't even plan to show attributes or data, though that's just me speculating at this point.

-- Scott