Best Practices

[Cantor, Scott]

On 7/22/17, 1:20 PM, "users on behalf of Larissa Riedel" <users-bounces at shibboleth.net on behalf of larissa.riedel88 at gmail.com> wrote:

> If the encryption of the assertions is disabled for one entity via relying-party.xml (p:encryptAssertions="false") the consent site
> for the user while logging in (release of attributes) is not shown anymore. I wasn't sure if this is a bug.

It's a bug if it's true.

-- Scott