Multiple copies of an attribute?

[Cantor, Scott]

On 5/29/13 1:35 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>So, just as an example, let's say I get role from an Idp and it is passed
>to my protected resource in the request headers as HTTP_ROLE.  Now, if
>the IDp releases 2 copies of this will I then see 2 instances of
>HTTP_ROLE passed to my protected resource?

No, you'll see HTTP_ROLE=role1;role2

Same as now.

It is formally speaking not strictly legal CGI to have duplicate headers,
but this is an area of dispute, Microsoft being one of the worst offenders
regarding how they deal with it.

The SP never, ever creates two copies of the same header itself.

-- Scott