Shibboleth Developers

[Chad La Joie <>]

At this time, the consent engine is a strictly front-channel thing.

On 3/19/10 11:56 AM, Kristof BAJNOK wrote:
> Hi,
> 
> can you point to some design docs on how uApprove will integrate into the 
> next major IdP release? What concerns me is if it would be used as an 
> element in the attribute filter chain, so that it would apply to back-
> channel requests as well. 
> 
> IMO unsolicited back-channel attribute requests can be used to provide very 
> cool things (VO and user provisioning in particular), but it's annoying 
> from 
> a privacy POV, unless the user could be given some control on the released 
> attributes. 
> 
> I know that _asking_ for user consent is a front-channel thing, but the 
> _effects_ of it should influence back-channel as well.
> 
> Kristof

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered