SP Headers missing attribute

Fri Apr 12 12:05:14 EDT 2013

Setting up a test system here with ADFS and Shib SP.  Both reside on the same box.  After some screwing around I get the 2 systems to talk.  I setup a claim rule in ADFS for SN.  When I hit the session page I see this:

Session Summary:
Miscellaneous Client Address: 10.152.139.47 Identity Provider: http://Portal-Test.portaltest.lyndadev.com/adfs/services/trust SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol Authentication Time: 2013-04-12T15:48:09.423Z Authentication Context Class: urn:federation:authentication:windows Authentication Context Decl: (none) Session Expiration (barring inactivity): 479 minute(s) Attributes sn: User

So SN is passing.  But it is not in the headers.  I used a simple ASP header dump:

<html><body><%for each x in Request.ServerVariables  response.write(x & " = " & Request.ServerVariables(x) & "<br/>")next%></body></html>

I would expect to see HTTP_SN with a value of User, but what I get is this:
ALL_HTTP = HTTP_CONNECTION:keep-alive HTTP_ACCEPT:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 HTTP_ACCEPT_ENCODING:gzip, deflate HTTP_ACCEPT_LANGUAGE:en-US,en;q=0.5 HTTP_COOKIE:ASP.NET_SessionId=wp100rqlkgvdyyzc1lbooelm; _shibsession_64656661756c7468747470733a2f2f706f7274616c746573742e6c796e64616465762e636f6d2f73686962626f6c6574682d7370=_d92e96baf2a99a766d4f9559f83b8bed HTTP_HOST:portaltest.lyndadev.comHTTP_USER_AGENT:Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0 
ALL_RAW = Connection: keep-alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.5 Cookie: ASP.NET_SessionId=wp100rqlkgvdyyzc1lbooelm; _shibsession_64656661756c7468747470733a2f2f706f7274616c746573742e6c796e64616465762e636f6d2f73686962626f6c6574682d7370=_d92e96baf2a99a766d4f9559f83b8bed Host: portaltest.lyndadev.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0 
APPL_MD_PATH = /LM/W3SVC/1/ROOT/portal
APPL_PHYSICAL_PATH = C:\Lynda\Lynda.Web.Portal\
AUTH_TYPE = 
AUTH_USER = 
AUTH_PASSWORD = 
LOGON_USER = 
REMOTE_USER = 
CERT_COOKIE = 
CERT_FLAGS = 
CERT_ISSUER = 
CERT_KEYSIZE = 
CERT_SECRETKEYSIZE = 
CERT_SERIALNUMBER = 
CERT_SERVER_ISSUER = 
CERT_SERVER_SUBJECT = 
CERT_SUBJECT = 
CONTENT_LENGTH = 0
CONTENT_TYPE = 
GATEWAY_INTERFACE = CGI/1.1
HTTPS = off
HTTPS_KEYSIZE = 
HTTPS_SECRETKEYSIZE = 
HTTPS_SERVER_ISSUER = 
HTTPS_SERVER_SUBJECT = 
INSTANCE_ID = 1
INSTANCE_META_PATH = /LM/W3SVC/1
LOCAL_ADDR = 10.152.139.47
PATH_INFO = /portal/a.aspx
PATH_TRANSLATED = C:\Lynda\Lynda.Web.Portal\a.aspx
QUERY_STRING = 
REMOTE_ADDR = 10.152.139.47
REMOTE_HOST = 10.152.139.47
REMOTE_PORT = 50090
REQUEST_METHOD = GET
SCRIPT_NAME = /portal/a.aspx
SERVER_NAME = portaltest.lyndadev.com
SERVER_PORT = 80
SERVER_PORT_SECURE = 0
SERVER_PROTOCOL = HTTP/1.1
SERVER_SOFTWARE = Microsoft-IIS/7.5
URL = /portal/a.aspx
HTTP_CONNECTION = keep-alive
HTTP_ACCEPT = text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
HTTP_ACCEPT_ENCODING = gzip, deflate
HTTP_ACCEPT_LANGUAGE = en-US,en;q=0.5
HTTP_COOKIE = ASP.NET_SessionId=wp100rqlkgvdyyzc1lbooelm; _shibsession_64656661756c7468747470733a2f2f706f7274616c746573742e6c796e64616465762e636f6d2f73686962626f6c6574682d7370=_d92e96baf2a99a766d4f9559f83b8bed
HTTP_HOST = portaltest.lyndadev.com
HTTP_USER_AGENT = Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0

No SN header there anywhere...
This is a REALLY simple testing rig.  The config is based on what I run in production here sans added metadata for other IDps etc.
What am I missing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130412/e53cf3cc/attachment-0001.html 