Adding custom headers to between applications

[Ron Harris]

Hi,

I am sorry, if these question is been asked multiple times.
I am using Shibboleth SP 3.0.2. In my project, we are going to use
Shibboleth for ADFS integration. I have multiple application in my project
which run under the same Shibboleth session.

What I am trying to do is that first application gets authenticated by
ADFS. It adds some information to header, and make servlet redirect to
another application URL.

Like below
https://aboc.com//MyServlet/myServlet (first to get ADFS session)
adds
request.setAttribute("sessiondata", "ireuytoiewyrt");
response.setHeader("sessiondata", "4iytirewwu");

response.sendRedirect("https://abc.com/my-first/HelloWorld.jsp");

When the second application, jsp page loads; it losses the attribute and
header information.

I have allowed headers in httpd.conf
<Location /MyServlet>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  ShibUseHeaders On
  require valid-user
</Location>

<Location /my-first>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  ShibUseHeaders On
  require valid-user
</Location>

Also they are allowed in CORS.

Can anyone please let me know what I am missing. Do I need to add any
configuration in Shibboleth SP configuration.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20180912/22f28547/attachment.html>