D-Net

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" version="3.0">

    <display-name>Shibboleth Identity Provider</display-name>

    <!-- Spring application context files. Files are loaded in the order they appear with subsequent files overwriting 

        same named beans in previous files. -->

    <context-param>

        <param-name>contextConfigLocation</param-name>

        <param-value>classpath*:/META-INF/net.shibboleth.idp/preconfig.xml,${idp.home}/system/conf/global-system.xml,classpath*:/META-INF/net.shibboleth.idp/config.xml,classpath*:/META-INF/net.shibboleth.idp/postconfig.xml</param-value>

    </context-param>

    <context-param>

        <param-name>contextClass</param-name>

        <param-value>net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext</param-value>

    </context-param>

    <context-param>

        <param-name>contextInitializerClasses</param-name>

        <param-value>net.shibboleth.idp.spring.IdPPropertiesApplicationContextInitializer</param-value>

    </context-param>

    <!-- Spring listener used to load up the configuration -->

    <listener>

        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>

    </listener>

    <!-- Filter for CORS -->

    <filter>

        <filter-name>CorsFilter</filter-name>

        <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>

        <init-param>

            <param-name>cors.allowed.origins</param-name>

            <param-value>*</param-value>

        </init-param>

        <init-param>

            <param-name>cors.allowed.methods</param-name>

            <param-value>GET,POST,HEAD,OPTIONS,DELETE</param-value>

        </init-param>

        <init-param>

            <param-name>cors.exposed.headers</param-name>

            <param-value>Access-Control-Allow-Origin,Access-Control-Allow-Credentials,Access-Control-Allow-Methods</param-value>

        </init-param>

        <init-param>

            <param-name>cors.support.credentials</param-name>

            <param-value>true</param-value>

        </init-param>

        <init-param>

            <param-name>cors.allowed.headers</param-name>

            <param-value>Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,X-XSRF-TOKEN,withcredentials</param-value>

        </init-param>

    </filter>

    <filter-mapping>

        <filter-name>CorsFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <!-- CORS FILTER -->

    <!-- Filters and filter mappings -->

    <!-- Try and force I18N, probably won't help much. -->

    <filter>

        <filter-name>CharacterEncodingFilter</filter-name>

        <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class>

        <init-param>

            <param-name>encoding</param-name>

            <param-value>UTF-8</param-value>

        </init-param>

        <init-param>

            <param-name>forceEncoding</param-name>

            <param-value>true</param-value>

        </init-param>

    </filter>

    <!-- Lets us lump repeated Set-Cookie headers into one, something containers rarely support. -->

    <filter>

        <filter-name>CookieBufferingFilter</filter-name>

        <filter-class>net.shibboleth.utilities.java.support.net.CookieBufferingFilter</filter-class>

    </filter>

    <!-- Automates TLS-based propagation of HttpServletRequest/Response into beans. -->

    <filter>

        <filter-name>RequestResponseContextFilter</filter-name>

        <filter-class>net.shibboleth.utilities.java.support.net.RequestResponseContextFilter</filter-class>

    </filter>

    <!-- Manages logging MDC. -->

    <filter>

        <filter-name>SLF4JMDCServletFilter</filter-name>

        <filter-class>net.shibboleth.idp.log.SLF4JMDCServletFilter</filter-class>

    </filter>

    <filter-mapping>

        <filter-name>CookieBufferingFilter</filter-name>

        <url-pattern>/profile/Logout</url-pattern>

        <url-pattern>/profile/Shibboleth/SSO</url-pattern>

        <url-pattern>/profile/SAML2/Unsolicited/SSO</url-pattern>

        <url-pattern>/profile/SAML2/Redirect/SSO</url-pattern>

        <url-pattern>/profile/SAML2/POST/SSO</url-pattern>

        <url-pattern>/profile/SAML2/POST-SimpleSign/SSO</url-pattern>

        <url-pattern>/profile/SAML2/Redirect/SLO</url-pattern>

        <url-pattern>/profile/SAML2/POST/SLO</url-pattern>

        <url-pattern>/profile/SAML2/POST-SimpleSign/SLO</url-pattern>

        <url-pattern>/profile/cas/login</url-pattern>

    </filter-mapping>

    <filter-mapping>

        <filter-name>CharacterEncodingFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <filter-mapping>

        <filter-name>RequestResponseContextFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <filter-mapping>

        <filter-name>SLF4JMDCServletFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <!-- Servlets and servlet mappings -->    

    <servlet>

        <servlet-name>idp</servlet-name>

        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>

        <init-param>

            <param-name>contextConfigLocation</param-name>

            <param-value>${idp.home}/system/conf/mvc-beans.xml, ${idp.home}/system/conf/webflow-config.xml</param-value>

        </init-param>

        <init-param>

            <param-name>contextClass</param-name>

            <param-value>net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext</param-value>

        </init-param>

        <load-on-startup>1</load-on-startup>

    </servlet>

    <servlet-mapping>

        <servlet-name>idp</servlet-name>

        <url-pattern>/status</url-pattern>

        <url-pattern>/profile/*</url-pattern>

    </servlet-mapping>

    <!-- Servlet protected by container used for RemoteUser authentication -->

    <servlet>

        <servlet-name>RemoteUserAuthHandler</servlet-name>

        <servlet-class>net.shibboleth.idp.authn.impl.RemoteUserAuthServlet</servlet-class>

        <load-on-startup>2</load-on-startup>

    </servlet>

    <servlet-mapping>

        <servlet-name>RemoteUserAuthHandler</servlet-name>

        <url-pattern>/Authn/RemoteUser</url-pattern>

    </servlet-mapping>

    <!-- Servlet protected by container used for X.509 authentication -->

    <servlet>

        <servlet-name>X509AuthHandler</servlet-name>

        <servlet-class>net.shibboleth.idp.authn.impl.X509AuthServlet</servlet-class>

        <load-on-startup>3</load-on-startup>

    </servlet>

    <servlet-mapping>

        <servlet-name>X509AuthHandler</servlet-name>

        <url-pattern>/Authn/X509</url-pattern>

    </servlet-mapping>

    <!-- Send request for the EntityID to the SAML metadata echoing JSP. -->

    <servlet>

        <servlet-name>shibboleth_jsp</servlet-name>

        <jsp-file>/WEB-INF/jsp/metadata.jsp</jsp-file>

    </servlet>

    <servlet-mapping>

        <servlet-name>shibboleth_jsp</servlet-name>

        <url-pattern>/shibboleth</url-pattern>

    </servlet-mapping>

    <!-- Send servlet errors through the IdP's MVC error handling. -->

    <error-page>

        <exception-type>net.shibboleth.idp.authn.ExternalAuthenticationException</exception-type>

        <location>/profile/RaiseError</location>

    </error-page>

    <!-- Block commonly flagged methods by using an empty auth-constraint. -->

    <security-constraint>

        <web-resource-collection>

            <web-resource-name>Non-API Content</web-resource-name>

            <url-pattern>/*</url-pattern>

            <http-method>PUT</http-method>

            <http-method>PATCH</http-method>

            <http-method>DELETE</http-method>

            <http-method>OPTIONS</http-method>

            <http-method>TRACE</http-method>

        </web-resource-collection>

        <auth-constraint/>

    </security-constraint>

    <!-- Allow any HTTP methods to the API flows. -->

    <security-constraint>

        <web-resource-collection>

            <web-resource-name>Administrative APIs</web-resource-name>

            <url-pattern>/profile/admin/*</url-pattern>

        </web-resource-collection>

        <!-- no auth-constraint tag here -->

    </security-constraint>

    <!--

    Uncomment to use container managed authentication. The new servlet spec (3.1)

    supports "**" as a wildcard syntax to avoid role usage, which is normally desirable.

    Older containers usually support "*" when proprietary options are used (e.g., Jetty

    requires setting the Strict property on the SecurityManager.)

    -->

    <!--

    <security-constraint>

        <display-name>Web Login Service</display-name>

        <web-resource-collection>

            <web-resource-name>user authentication</web-resource-name>

            <url-pattern>/Authn/RemoteUser</url-pattern>

            <url-pattern>/profile/SAML2/SOAP/ECP</url-pattern>

            <http-method>POST</http-method> 

        </web-resource-collection>

        <auth-constraint>

            <role-name>**</role-name>

        </auth-constraint>

        <user-data-constraint>

            <transport-guarantee>CONFIDENTIAL</transport-guarantee> 

        </user-data-constraint>

    </security-constraint>

    -->

    <!-- Uncomment if you want BASIC auth managed by the container. -->

    <!--

    <login-config>

        <auth-method>BASIC</auth-method>

        <realm-name>Web Login Service</realm-name>

    </login-config>

    -->

    <!--

    Uncomment if you want form-based auth managed by the container.

    NOTE that the default form-login UI in the IdP is not compatible

    with this option, and you will need to supply your own JSP form

    and error page. This is not a recommended approach and is severely

    limited in functionality as compared to using the IdP's own UI.

    -->

    <!--

    <login-config>

        <auth-method>FORM</auth-method>

        <realm-name>Web Login Service</realm-name>

        <form-login-config> 

            <form-login-page>/login.jsp</form-login-page>

            <form-error-page>/login-error.jsp</form-error-page>

        </form-login-config>

    </login-config>

    -->

</web-app>

idp.url.password.reset = http://beta.services.openaire.eu/uoa-user-management/forgotPassword.jsp

openaire.username.reset = http://beta.services.openaire.eu/uoa-user-management/remindUsername.jsp

    <head>

        <meta charset="utf-8">

	<meta http-equiv="X-UA-Compatible" content="IE=edge">

        <meta name="viewport" content="width=device-width,initial-scale=1.0">

	<meta http-equiv="content-type" content="text/html; charset=utf-8" />

	<meta name="description" content="OpenAIRE SSO"/>

	<link href="$request.getContextPath()/images/favicon.ico" />

        <title>#springMessageText("idp.title", "Web Login Service")</title>

        ## <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/main.css">

	<script src="$request.getContextPath()/js/jquery.js"></script>

	<script src="$request.getContextPath()/js/uikit.js"></script>

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/theme.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/custom.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/aai-custom.css">

    </head>

    <body class="" style="">

    <div class="uk-offcanvas-content uk-height-viewport">

        <!-- MENU STARTS HERE-->

        <div class="tm-header  tm-header-transparent" uk-header="">

         <div class="uk-container uk-container-expand">

           <nav class="uk-navbar" uk-navbar="{&quot;align&quot;:&quot;left&quot;}">

             <div class="uk-navbar-center">

               <div class="uk-logo uk-navbar-item">

                 <img alt="OpenAIRE" class="uk-responsive-height" src="$request.getContextPath()/images/Logo_Horizontal.png">

               </div>

             </div>

           </nav>

         </div>

        </div>

        <!-- MENU ENDS HERE -->

         <div class="first_page_section uk-section-default uk-section uk-padding-remove-vertical">

            <div class="first_page_banner_headline uk-grid-collapse uk-flex-middle uk-margin-remove-vertical uk-grid" uk-grid="">

         </div>

         <div class=" uk-section  uk-margin-large-top tm-middle custom-main-content" id="tm-main">

            <div class="uk-container">

               <div uk-grid="" class="uk-grid uk-grid-stack">

                  <div class="tm-main uk-width-1-1@s uk-width-1-1@m  uk-width-1-2@l uk-align-center">

                    <div class="uk-child-width-1-2@m uk-grid-small uk-grid-match" uk-grid>

                      <div>

            #parse("login-error.vm")

            <form action="$flowExecutionUrl" method="post">

            #set ($serviceName = $rpUIContext.serviceName)

            #if ($serviceName && !$rpContext.getRelyingPartyId().contains($serviceName))

              <p>

                #springMessageText("idp.login.loginTo", "Login to") $encoder.encodeForHTML($serviceName)

              </p>

            #end

            #if ($passwordEnabled)

              <div class="form-element-wrapper">

                <label for="username">#springMessageText("idp.login.username", "Username")</label>

                <input class="form-element form-field" id="username" name="j_username" type="text"

                	value="#if($username)$encoder.encodeForHTML($username)#end">

              </div>

              <div class="form-element-wrapper">

                <label for="password">#springMessageText("idp.login.password", "Password")</label>

                <input class="form-element form-field" id="password" name="j_password" type="password" value="">

              </div>

              <p>

                <input type="checkbox" name="donotcache" value="1" id="donotcache">

                <label for="donotcache">#springMessageText("idp.login.donotcache", "Don't Remember Login")</label>

               </p>

            #end

		<p>

                <input id="_shib_idp_revokeConsent" type="checkbox" name="_shib_idp_revokeConsent" value="true">

                <label for="_shib_idp_revokeConsent">#springMessageText("idp.attribute-release.revoke", "Clear prior granting of permission for release of your information to this service.")</label>

              </p>

            #if ($passwordEnabled)

              <div class="form-element-wrapper">

                <button class="uk-button uk-button-primary" type="submit" name="_eventId_proceed"

              </div>

            #end

            #foreach ($extFlow in $extendedAuthenticationFlows)

              #if ($authenticationContext.isAcceptable($extFlow) and $extFlow.apply(profileRequestContext))

                <div class="form-element-wrapper">

                  <button class="form-element form-button" type="submit" name="_eventId_$extFlow.getId()">

                    #springMessageText("idp.login.$extFlow.getId().replace('authn/','')", $extFlow.getId().replace('authn/',''))

                  </button>

                </div>

              #end

            #end

            </form>

			#*

              //

              //    SP Description & Logo (optional)

              //    These idpui lines will display added information (if available

              //    in the metadata) about the Service Provider (SP) that requested

              //    authentication. These idpui lines are "active" in this example

              //    (not commented out) - this extra SP info will be displayed.

              //    Remove or comment out these lines to stop the display of the

              //    added SP information.

              //

            *#

            #set ($logo = $rpUIContext.getLogo())

            #if ($logo)

<p>

              <img src= "$encoder.encodeForHTMLAttribute($logo)"

</p>

            #end

            #set ($desc = $rpUIContext.getServiceDescription())

            #if ($desc)

              $encoder.encodeForHTML($desc)

            #end

</div>

          <div>

            <ul class="list list-help">

              #if ($passwordEnabled)

                <li class="list-help-item"><a href="#springMessageText("idp.url.password.reset", "#")"> #springMessageText("idp.login.forgotPassword", "Forgot your password?")</a></li>

              #end

                <li class="list-help-item"><a href="#springMessageText("openaire.username.reset", "#")"> #springMessageText("openaire.username.forgot", "Forgot your username?")</a></li>

              <li class="list-help-item"><a href="#springMessageText("idp.url.helpdesk", "#")"> #springMessageText("idp.login.needHelp", "Need Help?")</a></li>

            </ul>

	    </div>

      </div>

      </div>

      <!-- FOOTER STARTS HERE-->

         <div class="custom-footer">

            <div class="uk-section-primary uk-section uk-section-small">

               <div class="uk-container">

                  <div class="uk-grid-margin uk-grid uk-grid-stack" uk-grid="">

                     <div class="uk-width-1-1@m uk-first-column">

                        <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-center">

                           <img alt="OpenAIRE" class="el-image" src="$request.getContextPath()/images/Logo_Horizontal_white_small.png">

                        </div>

                        <div class="footer-license uk-margin uk-margin-remove-bottom uk-text-center uk-text-lead">

                           <div><a href="http://creativecommons.org/licenses/by/4.0/" rel="license" target="_blank"><img alt="Creative" src="$request.getContextPath()/images/80x15.png" style="height: auto; max-width: 100%; vertical-align: middle;"></a>&nbsp;UNLESS OTHERWISE INDICATED, ALL MATERIALS CREATED BY THE OPENAIRE CONSORTIUM ARE LICENSED UNDER A&nbsp;<a href="http://creativecommons.org/licenses/by/4.0/" rel="license">CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE</a>.</div>

                           <div>OPENAIRE IS POWERED BY&nbsp;<a href="http://www.d-net.research-infrastructures.eu/" target="_blank">D-NET</a>.</div>

                        </div>

                        <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-right">

                           <a class="uk-totop uk-icon" href="#" uk-scroll="" uk-totop=""></a>

                        </div>

                     </div>

                  </div>

               </div>

	    <!-- FOOTER ENDS HERE-->

         </div>

	 </div>

 	</body>

    <head>

        <meta charset="utf-8">

        <meta name="viewport" content="width=device-width,initial-scale=1.0">

        <title>$title - $titleSuffix</title>

        ## <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/main.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/theme.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/custom.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/aai-custom.css">

    </head>

    <body class="" style="">

    <div class="uk-offcanvas-content uk-height-viewport">

        <!-- MENU STARTS HERE-->

        <div class="tm-header  tm-header-transparent" uk-header="">

         <div class="uk-container uk-container-expand">

           <nav class="uk-navbar" uk-navbar="{&quot;align&quot;:&quot;left&quot;}">

             <div class="uk-navbar-center">

               <div class="uk-logo uk-navbar-item">

                 <img alt="OpenAIRE" class="uk-responsive-height" src="$request.getContextPath()/images/Logo_Horizontal.png">

               </div>

             </div>

           </nav>

         </div>

        </div>

        <!-- MENU ENDS HERE -->

         <div class="first_page_section uk-section-default uk-section uk-padding-remove-vertical">

            <div class="first_page_banner_headline uk-grid-collapse uk-flex-middle uk-margin-remove-vertical uk-grid" uk-grid="">

            </div>

         </div>

         <div class=" uk-section  uk-margin-large-top tm-middle custom-main-content" id="tm-main">

            <div class="uk-container">

               <div uk-grid="" class="uk-grid uk-grid-stack">

                  <div class="tm-main uk-width-1-1@s uk-width-1-1@m  uk-width-1-1@l uk-align-center uk-first-column">

                      <div>

				<h3>$title - $titleSuffix</h3>

            #evaluate($message)

</div>

</div>

</div>

</div>

</div>

      <!-- FOOTER STARTS HERE-->

         <div class="custom-footer">

            <div class="uk-section-primary uk-section uk-section-small">

               <div class="uk-container">

                  <div class="uk-grid-margin uk-grid uk-grid-stack" uk-grid="">

                     <div class="uk-width-1-1@m uk-first-column">

                        <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-center">

                           <img alt="OpenAIRE" class="el-image" src="$request.getContextPath()/images/Logo_Horizontal_white_small.png">

                        </div>

                        <div class="footer-license uk-margin uk-margin-remove-bottom uk-text-center uk-text-lead">

                           <div><a href="http://creativecommons.org/licenses/by/4.0/" rel="license" target="_blank"><img alt="Creative" src="$request.getContextPath()/images/80x15.png" style="height: auto; max-width: 100%; vertical-align: middle;"></a>&nbsp;UNLESS OTHERWISE INDICATED, ALL MATERIALS CREATED BY THE OPENAIRE CONSORTIUM ARE LICENSED UNDER A&nbsp;<a href="http://creativecommons.org/licenses/by/4.0/" rel="license">CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE</a>.</div>

                           <div>OPENAIRE IS POWERED BY&nbsp;<a href="http://www.d-net.research-infrastructures.eu/" target="_blank">D-NET</a>.</div>

                        </div>

                        <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-right">

                           <a class="uk-totop uk-icon" href="#" uk-scroll="" uk-totop=""></a>

                        </div>

                     </div>

                  </div>

               </div>

            </div>

    </div>

    </body>

    <head>

        <meta charset="UTF-8">

        <meta name="viewport" content="width=device-width,initial-scale=1.0">

        ## <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/consent.css">

        <title>#springMessageText("idp.attribute-release.title", "Information Release")</title>

	<script src="$request.getContextPath()/js/jquery.js"></script>

	<script src="$request.getContextPath()/js/uikit.js"></script>

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/theme.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/custom.css">

        <link rel="stylesheet" type="text/css" href="$request.getContextPath()/css/aai-custom.css">

    </head>

    <body class="" style="">

	<div class="uk-offcanvas-content uk-height-viewport">

         <!-- MENU STARTS HERE-->

         <div class="tm-header  tm-header-transparent" uk-header="">

            <div class="uk-container uk-container-expand">

               <nav class="uk-navbar" uk-navbar="{&quot;align&quot;:&quot;left&quot;}">

                  <div class="uk-navbar-center">

                     <div class="uk-logo uk-navbar-item">

                        <img alt="OpenAIRE" class="uk-responsive-height" src="$request.getContextPath()/images/Logo_Horizontal.png">

                     </div>

                  </div>

               </nav>

         </div>

         <!-- MENU ENDS HERE-->

         <div class=" uk-section  tm-middle custom-main-content" id="tm-main">

            <div class="uk-container">

               <div uk-grid="" class="uk-grid uk-grid-stack">

                  <div class="tm-main uk-width-1-1@s uk-width-1-1@m  uk-width-1-1@l uk-align-center uk-first-column">

        <form action="$flowExecutionUrl" method="post" style="padding:10px" >

            <div class="uk-card uk-card-default uk-card-body">

		<p>

		#springMessageText("idp.attribute-release.serviceNameLabel", "You are about to access the service:")<br>

                #if ($rpOrganizationLogo)

                	<img src="$encoder.encodeForHTMLAttribute($rpOrganizationLogo)" alt="logo for $encoder.encodeForHTMLAttribute($serviceName)" class="organization_logo">

                #end

                #if ($serviceName)

                        <span class="service_name">$serviceName</span> :

                        #if ($rpOrganizationName)

                            #springMessageText("idp.attribute-release.of", "of") <span class="organization_name">$encoder.encodeForHTML($rpOrganizationName)</span>

                        #end

                #end

                #if ($serviceDescription)

                        <span class="service_description">$encoder.encodeForHTML($serviceDescription)</span>

                #end

                #if ($informationURL)

		<div class="uk-text-right">

			<span class="uk-text-small"><a href="$informationURL" target="_blank">#springMessageText("idp.attribute-release.informationURLLabel", "Additional information about the service")</a></span>

		</div>

                #end

		</p>

                    <table class="uk-table uk-table-striped uk-table-hover uk-table-small">

                        <thead>

                            <tr>

                                <th colspan="3">

                                    #springMessageText("idp.attribute-release.attributesHeader", "Information to be Provided to Service")

                                </th>

                            </tr>

                        </thead>

                        <tbody>

                            #foreach ($attribute in $attributeReleaseContext.getConsentableAttributes().values())

                                <tr>

                                    <td>$encoder.encodeForHTML($attributeDisplayNameFunction.apply($attribute))</td>

                                    <td>

                                        #foreach ($value in $attribute.values)

                                            #if ($replaceDollarWithNewline)

                                                #set ($encodedValue = $encoder.encodeForHTML($value.getDisplayValue()).replaceAll($encoder.encodeForHTML("$"),"<br>"))

                                            #else

                                                #set ($encodedValue = $encoder.encodeForHTML($value.getDisplayValue()))

                                            #end

                                            #if ($attributeReleaseFlowDescriptor.perAttributeConsentEnabled)

                                                <label for="$attribute.id"><strong>$encodedValue</strong></label>

                                            #else

                                                <strong>$encodedValue</strong>

                                            #end

                                            <br>

                                        #end

                                    </td>

                                    <td style="vertical-align: top">

                                        #if ($attributeReleaseFlowDescriptor.perAttributeConsentEnabled)

                                            #set ($inputType = "checkbox")

                                        #else

                                            #set ($inputType = "hidden")

                                        #end

                                        <input id="$attribute.id" type="$inputType" name="_shib_idp_consentIds" value="$encoder.encodeForHTML($attribute.id)" checked>

                                    </td>

                                </tr>

                            #end

                        </tbody>

                    </table>

                    <p style="margin-top: 10px;">

                        <a href="$privacyStatementURL">#springMessageText("idp.attribute-release.privacyStatementURLLabel", "Data privacy information of the service")</a>

                    </p>

                        #springMessageText("idp.attribute-release.confirmationQuestion", "The information above would be shared with the service if you proceed. Do you agree to release this information to the service every time you access it?")

                    #if ($attributeReleaseFlowDescriptor.doNotRememberConsentAllowed || $attributeReleaseFlowDescriptor.globalConsentAllowed)

                        <div id="generalConsentDiv" class="uk-dark uk-background-muted uk-padding">

			<p>

                        #springMessageText("idp.attribute-release.consentMethod", "Select an information release consent duration:")

			</p>

                        <p>

                            <input id="_shib_idp_doNotRememberConsent" type="radio" name="_shib_idp_consentOptions" value="_shib_idp_doNotRememberConsent">

                            <label for="_shib_idp_doNotRememberConsent">#springMessageText("idp.attribute-release.doNotRememberConsentItem", "I agree to send my information this time.")</label>

                        </p>

                        <p>

                            <input id="_shib_idp_rememberConsent" type="radio" name="_shib_idp_consentOptions" value="_shib_idp_rememberConsent" checked>

                            <label for="_shib_idp_rememberConsent">#springMessageText("", "I agree that the same information will be sent automatically to this <b>$serviceName</b> in the future.")</label>

                        </p>

##                    #if ($attributeReleaseFlowDescriptor.globalConsentAllowed)

##                        <p>

##                            <input id="_shib_idp_globalConsent" type="radio" name="_shib_idp_consentOptions" value="_shib_idp_globalConsent">

##                                <label for="_shib_idp_globalConsent">#springMessageText("idp.attribute-release.globalConsentItem", "I agree that <strong>all</strong> of my information will be released to <strong>any</strong> service.")</label>

##                        </p>

##                    #end

                        #springMessageText("idp.attribute-release.consentMethodRevoke", "This setting can be revoked at any time with the checkbox on the login page.")

                        </div>

                    #end

                    <p style="text-align: center;">

                        <input type="submit" name="_eventId_AttributeReleaseRejected" value="#springMessageText("idp.attribute-release.reject", "Reject")" style="margin-right: 30px;" class="uk-button uk-button-primary">

                        <input type="submit" name="_eventId_proceed" value="#springMessageText("idp.attribute-release.accept", "Accept")" class="uk-button uk-button-primary">

                    </p>

        </form>

                  </div>

               </div>

         </div>

      </div>

<!-- FOOTER STARTS HERE-->

      <div class="custom-footer">

         <div class="uk-section-primary uk-section uk-section-small">

            <div class="uk-container">

               <div class="uk-grid-margin uk-grid uk-grid-stack" uk-grid="">

                  <div class="uk-width-1-1@m uk-first-column">

                     <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-center">

                        <img alt="OpenAIRE" class="el-image" src="$request.getContextPath()/images/Logo_Horizontal_white_small.png">

                     </div>

                     <div class="footer-license uk-margin uk-margin-remove-bottom uk-text-center uk-text-lead">

                        <div><a href="http://creativecommons.org/licenses/by/4.0/" rel="license" target="_blank"><img alt="Creative" src="$request.getContextPath()/images/80x15.png" style="height: auto; max-width: 100%; vertical-align: middle;"></a>&nbsp;UNLESS OTHERWISE INDICATED, ALL MATERIALS CREATED BY THE OPENAIRE CONSORTIUM ARE LICENSED UNDER A&nbsp;<a href="http://creativecommons.org/licenses/by/4.0/" rel="license">CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE</a>.</div>

                        <div>OPENAIRE IS POWERED BY&nbsp;<a href="http://www.d-net.research-infrastructures.eu/" target="_blank">D-NET</a>.</div>

                     </div>

                     <div class="uk-margin uk-margin-remove-top uk-margin-remove-bottom uk-text-right">

                        <a class="uk-totop uk-icon" href="#" uk-scroll="" uk-totop=""></a>

                     </div>

                  </div>

               </div>

         </div>

    </body>