RE: [security-services] SAML deployments that use consent step?

["Scott Cantor" <cantor.2@osu.edu>]

Paul Madsen wrote on 2009-11-09:
> Do we have any sense of what fraction of SAML deployments have a consent
> step? Whether or not they explicitly leverage the protocol's dedicated
> mechanisms?

Never seen it used myself.

> There would seem to be an assumption in the outside world that, since
> SAML is often deployed between existing biz partners, consent isnt
> necessary.....

Signaling consent (with no proof) is orthogonal to obtaining consent in any
case.

There are plenty of examples of consent-based interactions using SAML,
mostly in higher ed of course.

https://www.switch.ch/aai/support/tools/uApprove.html

-- Scott