Shib SP using isPassive without lazy sessions

[Christopher Bongaarts]

On 7/23/2014 12:10 PM, Wessel, Keith wrote:
> Thanks, Scott. I suspected as much. So, the logical follow-up question is when would someone use shibRequestSetting isPassive on if all it's going to get you back is an SAML exception?

When the protected content is a script that sends the user to the IdP 
(via an appropriate SessionInitiator) on the *first request only*, and 
intelligently handles the presence or absence of attributes.  You also 
need to set ignoreNoPassive to avoid the exception from the IdP being 
handled as an actual error.

Example on here is close to this idea:

https://wiki.shibboleth.net/confluence/display/SHIB2/isPassive

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%