"persistentId" in consent-intercept-config.xml
Cantor, Scott
cantor.2 at osu.edu
Fri Sep 16 20:20:05 EDT 2016
On 9/16/16, 8:11 PM, "users on behalf of Takeshi NISHIMURA" <users-bounces at shibboleth.net on behalf of takeshi at nii.ac.jp> wrote:
> I understand it's for v2 users with legacy files, in order to automatically fit their
> general needs about consent. In other words, for those who already defined them.
Possibly; I think it was maybe just copied from a uApprove example.
> For new users, it's just confusing. Especially they will never happen to create
> "transientId" and "persistentId" Attribute Definitions.
Agreed.
> BTW, we cannot display values in NameID defined in saml-nameid.xml in the consent page,
> is this true?
Yes. Since the only formats we believe should ever be used are transient and persistent, and neither is particularly suited for consent, I believe it's a consistent outlook. That isn't why; the fundamental problem is that the NameID doesn't even exist at the point that consent happens, and changing that would be complex. It's also SAML specific and the consent code isn't. But that aside, I think it reflects the outlook of the project.
-- Scott
More information about the users
mailing list