Paul Madsen wrote on 2009-11-09:
> Do we have any sense of what fraction of SAML deployments have a consent
> step? Whether or not they explicitly leverage the protocol's dedicated
> mechanisms?
Never seen it used myself.
> There would seem to be an assumption in the outside world that, since
> SAML is often deployed between existing biz partners, consent isnt
> necessary.....
Signaling consent (with no proof) is orthogonal to obtaining consent in any
case.
There are plenty of examples of consent-based interactions using SAML,
mostly in higher ed of course.
https://www.switch.ch/aai/support/tools/uApprove.html
-- Scott
