Info on setting response header from Shibboleth.sso/SAML2/POST request (for P3P)

[Cantor, Scott]

On 1/28/13 12:49 PM, "Andrew Webb" <andrew.webb at statpro.com> wrote:
>
>I need to somehow ensure that requests to
>[oursite]/Shibboleth.sso/SAML2/POST include a P3P response header (we're
>hosted in an iframe by a client, and they're using IE 8). We're using IIS
>/ ASP.NET.

That won't help with any browser but IE.

>In another post 
><http://shibboleth.1660669.n2.nabble.com/P3P-Headers-missing-in-SSO-URL-tp
>7583377p7583379.html>, Scott says:- "Actually, don't, this is actually
>your mistake. See the docs on the Header command. Handlers in the SP that
>are generating redirects are returning non-200 status responses, which
>means you need to override the default "condition"
> of "onsuccess" in the Header command to "always"." Can you explain a bit
>more please? Docs on the Header command... is this an Apache feature?

Apache.

> Or a Shibboleth SP feature? Where are these docs? How to basically solve
>this problem under IIS? Thanks.

I don't use IIS, so I don't know what it's capabilities are in this area,
but I don't use any special APIs for dealing with responses that would
differentiate between 200 and non-200 responses, so I doubt it applies.

-- Scott