shibboleth isapi filter w/ IIS7.5

Cantor, Scott cantor.2 at osu.edu
Mon Oct 31 21:12:52 GMT 2011


On 10/31/11 4:59 PM, "Liam Hoekenga" <liamr at umich.edu> wrote:
>
>Can someone tell me why as far as I can tell, HTTP_REMOTEUSER (one
>underscore) is getting set in the environment instead of HTTP_REMOTE_USER
>(two underscores).  Everything I've read suggests that latter should be
>the case.

There is no way to set REMOTE_USER. Applications on IIS should avoid using
HTTP_REMOTE_USER or HTTP_REMOTE_USER as it provides no benefits and adds
confusion.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAcces
s

The specific answer is that the safeHeaderNames option is on by default.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPISAPI

-- Scott



More information about the users mailing list