targeted-id question

Cantor, Scott cantor.2 at osu.edu
Mon Feb 18 14:01:00 EST 2013


On 2/18/13 12:52 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>targeted-id: C8+gfgfds9876nzl03XdybzI=@schoolname.ac.ukSo on my protected
>resource I then expect to see http_targeted-id in the request headers but
>it is not there.  I have asked them to switch to persistent-id for this
>but apparently they have some challenge with that...(stupid Ymail
>formatting...)

Firstly, please review all of this:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTargetedID

You don't need to process the bogus syntax, you can uncomment the
NameIDFromScoped decoder so that it converts them to the proper form and
matches all the other IdPs you deal with.

Secondly, your problem is the safeHeaderNames option that collapses
punctuation. "targeted-id" would be HTTP_TARGETEDID.

-- Scott




More information about the users mailing list