Shib IdP 3 and IOP online service

[Maja Wolniewicz]

W dniu 26.03.2015 o 14:55, Cantor, Scott pisze:
> On 3/26/15, 4:44 AM, "Maja Wolniewicz" <mgw at umk.pl> wrote:
>> After switching off the per-attribute consent the consent page was
>> showed but accepted attributes where not included in the response and
>> they were not placed in the consent storage.
> The consent page shows *if* it can be applied to the release of the data. Pushing attributes allows that, as does querying with the consent being all or nothing, since rejecting consent in that case blocks the transaction entirely.
>
> Per-attribute consent does not work with queries at this time, so enabling it would be inaccurate and misleading to users.
>
> You are in control of all of that.
>
>> Switching off consent for this site didn't help as well.
> Didn't help what?
With switched off consent for this site and without 
p:includeAttributeStatement="true" option attributes were not added to 
the response.

Maja
>
>> Probably adding p:includeAttributeStatement="true" pointed by Tom would
>> help, but anyway when the consent for a SAM1 SP has to be presented the
>> per-attribute consent must be deactivated for all sites which may be
>> annoying.
>
> It would be more annoying for it to be there and actually lie to users.
>
> -- Scott
>

-- 
Maja Gorecka-Wolniewicz          mgw at umk.pl
Uczelniane Centrum               Information & Communication
Informatyczne                    Technology Centre
Uniwersytet Mikolaja Kopernika   Nicolaus Copernicus University
Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5278 bytes
Desc: Kryptograficzna sygnatura S/MIME
Url : http://shibboleth.net/pipermail/users/attachments/20150326/9465d10d/attachment-0001.bin