Attribute release consent failing (sometimes)

[Manuel Haim]

Hi list,

with my IdP 3.3.1, I seem to have the problem that about 2% of my users
(or their browsers) fail to pass the attribute release consent page
(attribute-release.vm) correctly.

It appears as if the users have unchecked their consent for each single
attribute. However, the idp.consent.allowPerAttribute option is disabled
(default), so there are no checkboxes for each attribute, but hidden
fields like this:

<input id="sn" name="_shib_idp_consentIds" value="sn" type="hidden" checked>


The consent is stored in a database (table 'storagerecords') where I see
several entries like this (with "appr":false, as if checkboxes for the
single attributes have been unchecked):

[{"id":"sn","v":"XXXXXXXX","appr":false}]


Has anybody had the same problem? Could it be that some browsers have a
problem with the "checked" attribute on a hidden field (i.e. not a
checkbox)? Any other ideas?

Kind regards,
Manuel