<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
The consent was only showing for that one SP. I have a SP specific
bean but had a typeO in the url value for relyingPartyIds for my SP.<br>
<br>
Thanks so much.<br>
<br>
<div class="moz-cite-prefix">On 1/17/20 3:13 PM, Ray Bon wrote:<br>
</div>
<blockquote type="cite"
cite="mid:8474b6ed32a168491f44ea084ebe31d0814d3ef0.camel@uvic.ca">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div>Donald,</div>
<div><br>
</div>
<div>This is attribute release consent page. It is set in
relying-party.xml, <a
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_display_IDP30_RelyingPartyConfiguration&d=DwMGaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=0QmXNBfA3NVyPjssME_shICPUqeraOxWDdoUOAbecBI&s=lk_8hiKzzGzbAzTd3bCHH5W2FhUiNdhqpiYS2P_SZQ0&e="
moz-do-not-send="true">
https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration</a></div>
<div><br>
</div>
<div>You can remove this bean:</div>
<div>
<pre style="background-color:#002b36;color:#839496;font-family:'Inconsolata';font-size:9.8pt;">
<span style="color:#586e75;"><</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="Shibboleth.SSO"
</span><span style="color:#2aa198;"> </span><span style="color:#6c71c4;">p</span><span style="color:#657b83;">:postAuthenticationFlows</span><span style="color:#2aa198;">="attribute-release"</span><span style="color:#586e75;">/></span></pre>
</div>
<div><br>
</div>
<div>Or add an entry to override it:</div>
<div>
<pre style="background-color:#002b36;color:#839496;font-family:'Inconsolata';font-size:9.8pt;">
<span style="color:#586e75;"><</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="RelyingPartyByName" </span><span style="color:#6c71c4;">c</span><span style="color:#657b83;">:relyingPartyIds</span><span style="color:#2aa198;">="#{{'yourSPID'}}"</span><span style="color:#586e75;">>
</span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">property </span><span style="color:#657b83;">name</span><span style="color:#2aa198;">="profileConfigurations"</span><span style="color:#586e75;">>
</span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">list</span><span style="color:#586e75;">>
</span><span style="color:#586e75;"> <</span><span style="color:#268bd2;font-weight:bold;">bean </span><span style="color:#657b83;">parent</span><span style="color:#2aa198;">="SAML2.SSO"
</span><span style="color:#2aa198;">
</span><span style="color:#2aa198;"> </span><span style="color:#6c71c4;">p</span><span style="color:#657b83;">:postAuthenticationFlows</span><span style="color:#2aa198;">="#{ {} }"</span><span style="color:#586e75;">/>
</span><span style="color:#586e75;"> </</span><span style="color:#268bd2;font-weight:bold;">list</span><span style="color:#586e75;">>
</span><span style="color:#586e75;"> </</span><span style="color:#268bd2;font-weight:bold;">property</span><span style="color:#586e75;">>
</span><span style="color:#586e75;"></</span><span style="color:#268bd2;font-weight:bold;">bean</span><span style="color:#586e75;">></span></pre>
</div>
<div><br>
</div>
<div>Ray</div>
<div><br>
</div>
<div>On Fri, 2020-01-17 at 14:48 -0500, Lohr, Donald wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px
#729fcf solid;padding-left:1ex">
<pre>We have a sandbox IdP we use for SP config/development purposes and have </pre>
<pre>configured that IdP to support an on-prem SP and right after a </pre>
<pre>successful auth, the following message displays in the browser:</pre>
<pre>
</pre>
<pre>
</pre>
<pre>You are about to access the service:</pre>
<pre>demo.jmu.edu</pre>
<pre>
</pre>
<pre>Information to be Provided to Service</pre>
<pre>cn smithxx</pre>
<pre>
</pre>
<pre>
</pre>
<pre>The information above would be shared with the service if you proceed. </pre>
<pre>Do you agree to release this information to the service every time you </pre>
<pre>access it?</pre>
<pre>Select an information release consent duration:</pre>
<pre>
</pre>
<pre>Ask me again at next login</pre>
<pre>
</pre>
<pre> I agree to send my information this time.</pre>
<pre>
</pre>
<pre>Ask me again if information to be provided to this service changes</pre>
<pre>
</pre>
<pre> I agree that the same information will be sent automatically to </pre>
<pre>this service in the future.</pre>
<pre>
</pre>
<pre>Do not ask me again</pre>
<pre>
</pre>
<pre> I agree that all of my information will be released to any service.</pre>
<pre>
</pre>
<pre>This setting can be revoked at any time with the checkbox on the login page.</pre>
<pre>
</pre>
<pre>
</pre>
<pre>How do we prevent this?</pre>
<pre>
</pre>
<pre>Thanks,</pre>
<pre>
</pre>
<pre>-- </pre>
<pre>D o n a l d L o h r</pre>
<pre> I n f o r m a t i o n S y s t e m s</pre>
<pre> J a m e s M a d i s o n U n i v e r s i t y</pre>
<pre> 5 4 0 . 5 6 8 . 3 7 3 0</pre>
<pre>
</pre>
</blockquote>
<div><span>
<pre>--
</pre>
<div>Ray Bon</div>
<div>Programmer Analyst</div>
<div>Development Services, University Systems</div>
<div>2507218831 | CLE 019 | <a href="mailto:rbon@uvic.ca"
moz-do-not-send="true">rbon@uvic.ca</a></div>
<div><br>
</div>
<div>I respectfully acknowledge that my place of work is
located within the ancestral, traditional and unceded
territory of the Songhees, Esquimalt and WSÁNEĆ Nations.</div>
</span></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
D o n a l d L o h r
I n f o r m a t i o n S y s t e m s
J a m e s M a d i s o n U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
</pre>
</body>
</html>