<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="text-align:left; direction:ltr;">
<div>Donald,</div>
<div><br>
</div>
<div>This is attribute release consent page. It is set in relying-party.xml, <a href="https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration">
https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration</a></div>
<div><br>
</div>
<div>You can remove this bean:</div>
<div>
<pre style="background-color:#002b36;color:#839496;font-family:'Inconsolata';font-size:9.8pt;"><br> <span style="color:#586e75;"><</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="Shibboleth.SSO"<br></span><span style="color:#2aa198;"> </span><span style="color:#6c71c4;">p</span><span style="color:#657b83;">:postAuthenticationFlows</span><span style="color:#2aa198;">="attribute-release"</span><span style="color:#586e75;">/></span></pre>
</div>
<div><br>
</div>
<div>Or add an entry to override it:</div>
<div>
<pre style="background-color:#002b36;color:#839496;font-family:'Inconsolata';font-size:9.8pt;"><br><span style="color:#586e75;"><</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="RelyingPartyByName" </span><span style="color:#6c71c4;">c</span><span style="color:#657b83;">:relyingPartyIds</span><span style="color:#2aa198;">="#{{'yourSPID'}}"</span><span style="color:#586e75;">><br></span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">property </span><span style="color:#657b83;">name</span><span style="color:#2aa198;">="profileConfigurations"</span><span style="color:#586e75;">><br></span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">list</span><span style="color:#586e75;">><br></span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="SAML2.SSO"<br></span><span style="color:#2aa198;"><br></span><span style="color:#2aa198;"> </span><span style="color:#6c71c4;">p</span><span style="color:#657b83;">:postAuthenticationFlows</span><span style="color:#2aa198;">="#{ {} }"</span><span style="color:#586e75;">/><br></span><span style="color:#586e75;"> </</span><span style="color:#268bd2;font-weight:bold;">list</span><span style="color:#586e75;">><br></span><span style="color:#586e75;"> </</span><span style="color:#268bd2;font-weight:bold;">property</span><span style="color:#586e75;">><br></span><span style="color:#586e75;"></</span><span style="color:#268bd2;font-weight:bold;">bean</span><span style="color:#586e75;">></span></pre>
</div>
<div><br>
</div>
<div>Ray</div>
<div><br>
</div>
<div>On Fri, 2020-01-17 at 14:48 -0500, Lohr, Donald wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<pre>We have a sandbox IdP we use for SP config/development purposes and have </pre>
<pre>configured that IdP to support an on-prem SP and right after a </pre>
<pre>successful auth, the following message displays in the browser:</pre>
<pre><br></pre>
<pre><br></pre>
<pre>You are about to access the service:</pre>
<pre>demo.jmu.edu</pre>
<pre><br></pre>
<pre>Information to be Provided to Service</pre>
<pre>cn smithxx</pre>
<pre><br></pre>
<pre><br></pre>
<pre>The information above would be shared with the service if you proceed. </pre>
<pre>Do you agree to release this information to the service every time you </pre>
<pre>access it?</pre>
<pre>Select an information release consent duration:</pre>
<pre><br></pre>
<pre>Ask me again at next login</pre>
<pre><br></pre>
<pre> I agree to send my information this time.</pre>
<pre><br></pre>
<pre>Ask me again if information to be provided to this service changes</pre>
<pre><br></pre>
<pre> I agree that the same information will be sent automatically to </pre>
<pre>this service in the future.</pre>
<pre><br></pre>
<pre>Do not ask me again</pre>
<pre><br></pre>
<pre> I agree that all of my information will be released to any service.</pre>
<pre><br></pre>
<pre>This setting can be revoked at any time with the checkbox on the login page.</pre>
<pre><br></pre>
<pre><br></pre>
<pre>How do we prevent this?</pre>
<pre><br></pre>
<pre>Thanks,</pre>
<pre><br></pre>
<pre>-- </pre>
<pre>D o n a l d L o h r</pre>
<pre> I n f o r m a t i o n S y s t e m s</pre>
<pre> J a m e s M a d i s o n U n i v e r s i t y</pre>
<pre> 5 4 0 . 5 6 8 . 3 7 3 0</pre>
<pre><br></pre>
</blockquote>
<div><span>
<pre>-- <br></pre>
<div>Ray Bon</div>
<div>Programmer Analyst</div>
<div>Development Services, University Systems</div>
<div>2507218831 | CLE 019 | <a href="mailto:rbon@uvic.ca">rbon@uvic.ca</a></div>
<div><br>
</div>
<div>I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.</div>
</span></div>
</body>
</html>