Shib IdP 3 and IOP online service

[Cantor, Scott]

On 3/26/15, 4:44 AM, "Maja Wolniewicz" <mgw at umk.pl> wrote:
>After switching off the per-attribute consent the consent page was
>showed but accepted attributes where not included in the response and 
>they were not placed in the consent storage.

The consent page shows *if* it can be applied to the release of the data. Pushing attributes allows that, as does querying with the consent being all or nothing, since rejecting consent in that case blocks the transaction entirely.

Per-attribute consent does not work with queries at this time, so enabling it would be inaccurate and misleading to users.

You are in control of all of that.

>Switching off consent for this site didn't help as well.

Didn't help what?

>Probably adding p:includeAttributeStatement="true" pointed by Tom would 
>help, but anyway when the consent for a SAM1 SP has to be presented the 
>per-attribute consent must be deactivated for all sites which may be 
>annoying.


It would be more annoying for it to be there and actually lie to users.

-- Scott