<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-CA" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am very new to managing and working with Shibboleth IDP. We are currently moving our production systems from V3 to V4.01. We are looking into enabling attribute consent with terms of use and for the most part we have it working on our
development system. My question, is there a way to exclude certain SP sites from having to consent to attribute release and seeing the terms of use page?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have the following in the profile-intercept.xml file however that is not working as when I login via samltest I still see the attribute consent form as well as the subsequent terms of use page. Am I in the right ballpark here? Is there
something I am missing? Any help is appreciated.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Rene<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><bean id="MyCondition" parent="shibboleth.Conditions.AND"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <!-- The default condition from system/conf/profile-intercept-system.xml --><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="shibboleth.Conditions.OR"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="shibboleth.Conditions.NOT"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg value="%{idp.consent.allowPerAttribute:false}" /><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <bean class="net.shibboleth.idp.saml.profile.config.logic.IncludeAttributeStatementPredicate" /><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"> <!-- A custom condition --><o:p></o:p></p>
<p class="MsoNormal"><bean id="MyCondition" parent="shibboleth.Conditions.NOT"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <bean id="MyCondition" parent="shibboleth.Conditions.RelyingPartyId"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg name="candidates"><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <value>"https://samltest.id/saml/sp</value><o:p></o:p></p>
<p class="MsoNormal"> <value>https://another.example.com/shibboleth</value><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"></bean><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"></bean><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"></bean><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>