Shibboleth Developers

["Josh Howlett" <>]

> > There is an argument that the consent-based approach is neither 
> > desirable nor necessary within an educational context.
> 
> Not really the right list for this, but to add to Scott's answer ...

Yes, I'll try to keep this brief.

> But 
> many situations where federated authentication is of interest 
> aren't "legitimate educational use", eg access to Microsoft's 
> DreamSpark or more generally

Granted. I'm not disputing that consent isn't sometimes necessary to
support the types of use-cases you suggested. There is a certainly a
place for consent-management tools but I don't believe that the
requirement is as general as people sometimes think, particularly in
educational sectors other than HE, such as schools (~K12), where the
learning environment is subject to much tighter control.

There is a tendency for some folks to default to a legal panic when it
often isn't necessary, and I think this sometimes manifests itself in
the way that Chad noted.

josh.

JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG