Docusign authorization

[Michael A Grady]

> On Nov 29, 2017, at 7:30 PM, Paul B. Henson <henson at cpp.edu> wrote:
> 
> I'm using a group in the attribute release policy to determine what attributes to release. Adding a whole flow just to special case this one service seems a bit heavyweight/kludgy?

Perhaps you are thinking "whole new authentication flow"? In this case, the intercept flow is just a "post authentication flow", like consent or terms of use are. See this wiki page:

 https://wiki.shibboleth.net/confluence/display/IDP30/ContextCheckInterceptConfiguration <https://wiki.shibboleth.net/confluence/display/IDP30/ContextCheckInterceptConfiguration>

> 
> I'm wondering if the other shib users Docusign is referring to actually did do something on the idp side or are just living with the goofy error on the Docusign side 8-/.

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171129/05a94b8e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 874 bytes
Desc: Message signed with OpenPGP
URL: <http://shibboleth.net/pipermail/users/attachments/20171129/05a94b8e/attachment.sig>