Problems with Attribute Consent Release Page
Marco Malavolti
marco.malavolti at garr.it
Thu Dec 2 16:11:39 UTC 2021
Hi Rod and Thank you for your help.
I've attached my idp-process.log and I confirm to have, on my
conf/idp.properties:
idp.storage.htmlLocalStorage=true
and all default values provided by a new Shibboleth IdP v4.1.4 installation.
In both cases, idp.attribute-release.rememberConsent ("Chiedimelo di
nuovo se le informazioni da fornire a questo servizio
cambiano") or idp.attribute-release.globalConsent ("Non chiedermelo di
nuovo"), the next time around the user is prompted again.
As I said, the choice does not work for me on Shibboleth IdP v4.1.4.
Best Regards,
Marco
Il 26/11/21 12:22, Rod Widdowson ha scritto:
>> The problem is that the user can't choose to skip the Consent Page by selecting an
>> option to decide the duration of the information release content that the page offers.
> So they approach the IdP & consent to attribute release. Presumably they do not select the
> idp.attribute-release.doNotRememberConsent ("Chiedimelo di nuovo al prossimo accesso") button.
>
> They select either idp.attribute-release.rememberConsent ("Chiedimelo di nuovo se le informazioni da fornire a questo servizio
> cambiano") or idp.attribute-release.globalConsent ("Non chiedermelo di nuovo").
>
> In both cases the next time around the user is prompted again? Or is it just in one of the two cases?
>
> After upgrade to V4.1 you should expected to be prompted once (per principal, per browser), but in the rememberConsent/globalConsent
> that should be it.
>
> Does debug logging for "net.shibboleth.idp.consent" show anything interesting?
>
> Rod
>
--
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI: 07577141000
Mobile: +39 331 608 3639
PGP KEY: https://keys.openpgp.org/search?q=marco.malavolti@garr.it
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211202/c0e53d3f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: idp-process.log
Type: text/x-log
Size: 11616 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20211202/c0e53d3f/attachment.bin>
More information about the users
mailing list