Shibboleth Developers

[Kristof BAJNOK <>]

Hi,

can you point to some design docs on how uApprove will integrate into the 
next major IdP release? What concerns me is if it would be used as an 
element in the attribute filter chain, so that it would apply to back-
channel requests as well. 

IMO unsolicited back-channel attribute requests can be used to provide very 
cool things (VO and user provisioning in particular), but it's annoying from 
a privacy POV, unless the user could be given some control on the released 
attributes. 

I know that _asking_ for user consent is a front-channel thing, but the 
_effects_ of it should influence back-channel as well.

Kristof