Info on setting response header from Shibboleth.sso/SAML2/POST request (for P3P)

Andrew Webb andrew.webb at
Mon Jan 28 12:49:14 EST 2013

I need to somehow ensure that requests to [oursite]/Shibboleth.sso/SAML2/POST
include a P3P response header (we're hosted in an iframe by a client, and
they're using IE 8).We're using IIS / ASP.NET. In another post
, Scott says:-"Actually, don't, this is actually your mistake. See the docs
on the Headercommand. Handlers in the SP that are generating redirects are
returningnon-200 status responses, which means you need to override the
default"condition" of "onsuccess" in the Header command to "always"."Can you
explain a bit more please?  Docs on the Header command... is this an Apache
feature? Or a Shibboleth SP feature?  Where are these docs?How to basically
solve this problem under IIS?Thanks.

View this message in context:
Sent from the Shibboleth - Users mailing list archive at
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the users mailing list