<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello, I followed doc
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP4/ConsentConfiguration">https://wiki.shibboleth.net/confluence/display/IDP4/ConsentConfiguration</a></p>
<p>but my IDP still don't show the intercept of attribute consent, I
get to a test SP (attribute-viewer) without beeing ask to consent
attributs (and I do see attributes on the SP !) <br>
</p>
<p>here's what I did :</p>
<p>1) enabled the module : <code class="java plain">bin/module.sh
-e idp.intercept.Consent</code></p>
<p>2) set consent properties in idp.properties : <br>
</p>
<p>idp.consent.allowGlobal = true<br>
idp.consent.allowPerAttribute = true</p>
<p>+ storage<br>
</p>
<p>idp.consent.StorageService =
shibboleth.ClientPersistentStorageService</p>
<p>idp.consent.maxStoredRecords = 10</p>
<p>3) configured (example) messages in <em>messages/messages.properties</em>
</p>
<div class="container" title="Hint: double-click to select code">
<div class="line number1 index0 alt2"><code class="text plain">my-terms
= my-tou</code></div>
<div class="line number2 index1 alt1"><code class="text plain">my-tou.title
= Example Terms of Use</code></div>
<div class="line number3 index2 alt2"><code class="text plain">my-tou.text
= This is an example Terms of Use</code></div>
</div>
<p>4) Using One Terms of Use Message for Every Relying Party <code
class="java plain"><em>conf/intercept/consent-intercept-config.xml</em></code></p>
<div class="container" title="Hint: double-click to select code">
<div class="line number1 index0 alt2"><code class="java plain"><bean
id=</code><code class="java string">"shibboleth.consent.terms-of-use.Key"</code>
<code class="java plain">parent=</code><code class="java string">"shibboleth.Functions.Constant"</code><code
class="java plain">></code></div>
<div class="line number2 index1 alt1"><code class="java spaces"> </code><code
class="java plain"><constructor-arg value=</code><code
class="java string">"my-terms"</code><code class="java plain">/></code></div>
<div class="line number3 index2 alt2"><code class="java plain"></bean></code></div>
<div class="line number3 index2 alt2"><code class="java plain">+</code></div>
<div class="line number3 index2 alt2"><code class="java plain"><util:set
id="shibboleth.consent.attribute-release.PromptedAttributeIDs"><br>
<value>mail</value><br>
</util:set><br>
</code></div>
<div class="line number3 index2 alt2">
<p><code class="java plain">5) </code>Enabling Terms Of Use
Intercept Flow <em>conf/relying-party.xml</em>.</p>
<p><i><font size="-1"><!-- commented this default <bean
parent="SAML2.SSO" /> and replaced with line
below--><br>
<!-- consent JP --><br>
<bean parent="SAML2.SSO"
p:postAuthenticationFlows="#{ {'terms-of-use',
'attribute-release'} }" /></font></i><br>
not sure of that one ...? <br>
</p>
7) after all these configurations, I stoped tomcat, rebuild
idp.war (shibboleth-idp]# ./bin/build.sh => Installation
Directory: [/opt/shibboleth-idp] ) , restart tomcat <br>
</div>
<div class="line number3 index2 alt2"><br>
</div>
<div class="line number3 index2 alt2">but still , no attribute
release Intercept consent appears . <br>
</div>
<div class="line number3 index2 alt2"><br>
</div>
<div class="line number3 index2 alt2">did I missed something ? <br>
</div>
<div class="line number3 index2 alt2"><br>
</div>
<div class="line number3 index2 alt2">thanks . <br>
<p><br>
</p>
<p><br>
</p>
<p><code class="java plain"><em></em></code></p>
</div>
</div>
</body>
</html>