Attribute Consent

[Cantor, Scott]

On 1/25/17, 8:44 PM, "users on behalf of Joel Levin" <users-bounces at shibboleth.net on behalf of joel.aaron.levin at gmail.com> wrote:

>    If you could -- that will be super helpful - i.e. with the entityID for application that requires attribute consent form.

There are detailed examples of different strategies for defining profile settings statically and dynamically in the wiki.

Think about your goals and requirements and the range of options you need to set now and later, and the criteria for setting them, and then craft a strategy based on the feature set to most concisely express what you want.

My advice remains: use the metadata. Attach entity attribute extensions locally or add them on the fly with a metadata filter, and apply rules in relying-party.xml to derive settings based on the entity attributes. All of which I provided examples for. A little up front work and you can avoid ever touching most of the files for anything routine.

-- Scott