disable attribute release consent for OIDC?

[Liam Hoekenga]

>
> > Is it possible to (selectively) disable attribute release consent for
> the OIDC login flow?
>
> Isn't it a separate profile config bean (SAML2.SSO, Shibboleth.SSO, etc.)?
> The interceptor flows have to be enabled by profile, so just don't enable
> it there...there are other ways but that should be the simplest.
>

Oops, I didn't see it there.  Sure enough...
     <bean parent="OIDC.SSO" p:postAuthenticationFlows="attribute-release"
/>

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190620/5b0352f0/attachment.html>