Access user attribute in terms-of-use.vm

[Rhian Resnick]

Scott,

Thanks for this info. If you wish I will send you a diff off list as I think we have a working proof of concept.


Rhian Resnick

Assistant Director Middleware and HPC

Office of Information Technology


Florida Atlantic University

777 Glades Road, CM22, Rm 173B

Boca Raton, FL 33431

Phone 561.297.2647

Fax 561.297.0222

 [image] <https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg>

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, August 21, 2017 12:06:53 PM
To: Shib Users
Subject: Re: Access user attribute in terms-of-use.vm

On 8/21/17, 11:02 AM, "users on behalf of Rhian Resnick" <users-bounces at shibboleth.net on behalf of rresnick at fau.edu> wrote:

> We could then have a relaying party policy applied on the destination site that does not initiate that flow during authentication?

Well, it's after authentication (completely after, it's after attributes are resolved and just before it starts generating the response). You would turn it on with the postAuthenticationFlows property, but the specifics just depend on what/when you want it to happen. It could be on by default and off for exceptions or off by default and on for exceptions.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170821/065db65f/attachment.html>