Access user attribute in terms-of-use.vm

[Cantor, Scott]

On 8/21/17, 11:02 AM, "users on behalf of Rhian Resnick" <users-bounces at shibboleth.net on behalf of rresnick at fau.edu> wrote:

> We could then have a relaying party policy applied on the destination site that does not initiate that flow during authentication?

Well, it's after authentication (completely after, it's after attributes are resolved and just before it starts generating the response). You would turn it on with the postAuthenticationFlows property, but the specifics just depend on what/when you want it to happen. It could be on by default and off for exceptions or off by default and on for exceptions.

-- Scott