Problems with Attribute Consent Release Page

Marco Malavolti marco.malavolti at garr.it
Thu Dec 2 16:11:39 UTC 2021


Hi Rod and Thank you for your help.

I've attached my idp-process.log and I confirm to have, on my 
conf/idp.properties:

idp.storage.htmlLocalStorage=true

and all default values provided by a new Shibboleth IdP v4.1.4 installation.

In both cases, idp.attribute-release.rememberConsent ("Chiedimelo di 
nuovo se le informazioni da fornire a questo servizio
cambiano") or idp.attribute-release.globalConsent ("Non chiedermelo di 
nuovo"), the next time around the user is prompted again.

As I said, the choice does not work for me on Shibboleth IdP v4.1.4.

Best Regards,
Marco



Il 26/11/21 12:22, Rod Widdowson ha scritto:
>> The problem is that the user can't choose to skip the Consent Page by selecting an
>> option to decide the duration of the information release content that the page offers.
> So they approach the IdP & consent to attribute release.  Presumably they do not select the
> idp.attribute-release.doNotRememberConsent ("Chiedimelo di nuovo al prossimo accesso") button.
>
> They select either idp.attribute-release.rememberConsent ("Chiedimelo di nuovo se le informazioni da fornire a questo servizio
> cambiano") or idp.attribute-release.globalConsent ("Non chiedermelo di nuovo").
>
> In both cases the next time around the user is prompted again? Or is it just in one of the two cases?
>
> After upgrade to V4.1 you should expected to be prompted once (per principal, per browser), but in the rememberConsent/globalConsent
> that should be it.
>
> Does debug logging for "net.shibboleth.idp.consent" show anything interesting?
>
> Rod
>

-- 
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI: 07577141000
Mobile: +39 331 608 3639
PGP KEY: https://keys.openpgp.org/search?q=marco.malavolti@garr.it

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211202/c0e53d3f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: idp-process.log
Type: text/x-log
Size: 11616 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20211202/c0e53d3f/attachment.bin>


More information about the users mailing list