users Digest, Vol 74, Issue 133

[Petursson, Sigurdur]

Thanks Scott. I tried reverting this part and still not working:
<beanparent="Shibboleth.SSO"p:postAuthenticationFlows="attribute-release"/>

BTW, documentation 
(https://wiki.shibboleth.net/confluence/display/IDP30/ConsentConfiguration) 
suggests this is needed to enable terms of use flow, see section 
"Enabling Terms Of Use Intercept Flow". There is no mention of it being 
only for SAML 1.1 legacy.

Rgds,

On 8/30/2017 6:13 PM, users-request at shibboleth.net wrote:
> Message: 1
> Date: Wed, 30 Aug 2017 21:25:52 +0000
> From: "Cantor, Scott"<cantor.2 at osu.edu>
> To: Shib Users<users at shibboleth.net>
> Subject: Re: IDP 3.3 - Terms of Use not showing up
> Message-ID:<5FE51C73-EEED-4AA1-8BC1-3F46B0F5EA49 at osu.edu>
> Content-Type: text/plain; charset="utf-8"
>
> On 8/30/17, 5:17 PM, "users on behalf of Petursson, Sigurdur"<users-bounces at shibboleth.net on behalf of spetursson at miami.edu>  wrote:
>
>> conf/relying-party.xml:
>> <beanparent="Shibboleth.SSO"p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }"/>
> That's for SAML 1.1 legacy requests, which I doubt is what you intend or need.
>
> -- Scott
>
>
>
> ------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170831/e3e07475/attachment-0001.html>