OIDC in 4.1.0 and problems with claims

[Cantor, Scott]

On 4/6/21, 4:25 PM, "users on behalf of Darren Boss" <users-bounces at shibboleth.net on behalf of darren.boss at computecanada.ca> wrote:

>    Your comment about "you can also toggle an option to store the record
>    in the access token" rings a bell. I did come across that somewhere in
>    the docs. My goal is to get attribute release consent working for at
>    least a subset of my registered OIDC clients.

It wasn't actually documented (came late), other than the javadocs.

Once it's clarified/confirmed we can certainly add to the docs, but as I say, if you're using client-side storage for consent, I would think it's clear that would be...problematic? But there is a workaround.

Probably we need a separate discussion of consent for the docs rather than try and alude to all this in other places...

-- Scott