Re: [security-services] Protocol extension for role change

["Cantor, Scott" <cantor.2@osu.edu>]

On 11/8/16, 8:13 PM, "security-services@lists.oasis-open.org on behalf of Cantor, Scott" <security-services@lists.oasis-open.org on behalf of cantor.2@osu.edu> wrote:

> I would probably argue for some other approach involving some kind of polling for the role. Perhaps the
> software could detect a lag in activity and when the user comes back "re-certify" the status using an API.
> Seems like a good OAuth use case.

(But not exclusively so, certainly there are Shibboleth deployments that do this general kind of polling for data with AttributeQuery.)

-- Scott