Does Shib on IIS "see" every request even if no RequestMapper rule triggers it?

[Michael A Grady]

On Mar 21, 2013, at 7:32 PM, Cantor, Scott wrote:

> On 3/21/13 8:13 PM, "Michael A Grady" <mgrady at unicon.net> wrote:
> 
>> I'm used to Apache where you need to explicitly enable mod_shib to "see"
>> a request by adding:
>> 
>> AuthType shibboleth
>> Require shibboleth
> 

> No. If authType isn't set for a request, the filter ignores the request
> and there are no actions taken to clear any headers or perform any
> functions. It is unsafe to look at any headers for requests to paths that
> don't have authType set. They will be whatever the client wants them to be
> and will never be the result of anything the SP does. Just as they would
> be on Apache if you didn't set AuthType to shibboleth.
> 

So to get the same behavior on IIS as the above two Apache config lines provide on Apache (i.e. don't require a session to exist, but if it does, add the information to the request environment), what is the corresponding RequestMapper config? I don't see a NativeSPContentSettings config that matches the basic "Require shibboleth" Apache config.

--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.