SP Headers missing attribute

[Cantor, Scott]

On 4/12/13 1:16 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>I use this link to initiate the session:

All that does is initiate a session and tell it to end at a particular
target URL, but the SP doesn't necessarily protect that final URL. That's
up to the map.

The determinant is if you don't login that way and access the resource
directly. If you aren't forced to login, then that means at least
requireSession is false. If authType is seen to be "shibboleth" for that
request, then it will at least manage the headers. If not, it won't. It's
not, so nothing is set for that resource.

In your case I would imagine the host is not configured in the Site
configuration in shibboleth2.xml so there's no mapping happening properly
for the requests.

>             <Host name="portaltest.lyndadev.com">

If that's the host you want to map, then you need to map the IIS instance
ID for the site to that hostname.

Everything you posted demonstrates that that isn't happening.

Turn native.logger to DEBUG and you'll see what it's doing or not doing.

-- Scott