terms of use

[Cantor, Scott]

On 4/28/17, 5:03 AM, "users on behalf of BÖSCH Christian" <users-bounces at shibboleth.net on behalf of boesch at fhv.at> wrote:

>With uApprove and IdPv2 there was a versioning capability of the terms of use.
>If terms of use changed they had to be approved again.
>Is this not possible with the consent possibilities in IdPv3? I couldn’t find any information about that…

Among other methods, I believe you can just use the shibboleth.consent.terms-of-use.Key bean example that's commented out as a demonstration of both returning a non-trivial key for the TOU, and then changing it it as a way of revving the version of the terms. If the key changes, then it's forced to do it again.

I believe it's also possible just by manipulating the message properties its accessing (e.g. the bug that was filed recently that indicates that changing the language version a user sees is actually being seen as a different set of terms). So it's even more aggressive about it than people want it to be.

-- Scott