<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Consolas" size="2"><span style="font-size:10.5pt;">
<div>I have a Shib SP configuration that isn’t working as I expect it to. This is on v 2.4.3 running on Win2008R2/IIS7.5. Maybe my expectations are wrong, but it seems like a bug.</div>
<div> </div>
<div>I’m attempting to protect content in specific directories with Path statements. This config works properly for all configured paths:</div>
<div> </div>
<div><Host name="diafine3.cac.washington.edu"></div>
<div> <Path name="secure" authType="shibboleth" requireSession="true"/></div>
<div> <Path name="stepup" applicationId="stepup2f" authType="shibboleth" requireSessionWith="uwtoken"/></div>
<div> <Path name="test" authType="shibboleth"></div>
<div> <Path name="secure" authType="shibboleth" requireSession="true"/></div>
<div> <Path name="stepup" applicationId="stepup2f" authType="shibboleth" requireSessionWith="uwtoken"/></div>
<div> </Path></div>
<div></Host></div>
<div> </div>
<div>If I comment out the first two path statements then the test/secure path still works as expected, but the test/stepup path doesn't. After hitting the authentication service and being returned to my SP I get the error:</div>
<div> </div>
<div>"Shibboleth Error</div>
<div>ISAPI extension can only be invoked to process Shibboleth protocol requests. Make sure the mapped file extension doesn't match actual content."</div>
<div> </div>
<div>I've got the default mapping to .sso and there is no actual content that matches.</div>
<div> </div>
<div> </div>
<div>Michael W. Brogan</div>
<div>Technical Lead, Identity and Access Management</div>
<div>UW Information Technology University of Washington</div>
<div>206-685-7521</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
</body>
</html>