Best Practices

[Cantor, Scott]

On 7/22/17, 2:04 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
> If the encryption of the assertions is disabled for one entity via relying-party.xml (p:encryptAssertions="false") the consent site
> for the user while logging in (release of attributes) is not shown anymore. I wasn't sure if this is a bug.

It is not true, at least as of the state of the code under development. I imagine somebody using it with 3.3.1 could verify that it's not true there either.

-- Scott