Getting REMOTE_USER from the SP

Cantor, Scott cantor.2 at
Wed Feb 13 16:05:50 EST 2013

On 2/13/13 3:03 PM, "Tim Larson" <Tim.Larson at> wrote:

>Is there a trick to getting the Shibboleth SP to send the REMOTE_USER
>value as an HTTP Header value?

It's not a header, that's a CGI variable that can only be set internally
within a web server.

>I am running Apache 2.4 on Windows 2008 with the Shibboleth SP version
>2.5.1 for win64.  I have Apache set up as a reverse proxy server for a
>weblogic instance on the same machine.
>  Everything seems to be working properly, but the resulting headers
>being passed to weblogic do not include the REMOTE_USER http header value.

No, that's not settable with a proxy. With Tomcat or Jetty and AJP, you
can get it set because the proxy is not an HTTP reverse proxy.

>My understanding was the SP would include this by default when it
>redirected to the application.  Is there a configuration value that needs
>to be set to enable this?

No, it's not physically possible.

-- Scott

More information about the users mailing list