Shibboleth attributes capture with PHP with AJP connector?
Alvarez, Dyana I
d.alvarez2 at miami.edu
Thu May 15 11:20:56 EDT 2014
Thank you very much!
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Thursday, May 15, 2014 10:50 AM
To: users at shibboleth.net
Subject: Re: Shibboleth attributes capture with PHP with AJP connector?
* d.alvarez2 <d.alvarez2 at miami.edu> [2014-05-15 16:36]:
> There are lots of PHP code examples of how to retrieve it
> programmatically but I don't know if I need to follow the steps with
> the AJP connector for PHP the same way I did with Java.
No, PHP generally is run in-process (mod_php) or via FastCGI (e.g. using mod_fcgid). In both cases the $_SERVER super-global will have all your environment variables and hence attributes such as $_SERVER['REMOTE_USER'].
> Also, my other question is if I see that the attributes come in
> encrypted, will I be able to decrypted in the code or will it the code
> just decrypt the attributes by me just displaying them like this?
The Shib SP will do all necessary decoding and decryption for you (though I only have ever encuontered encrypted responses, encrypted assertions, and encrypted NameIDs, not encrypted attributes) -- unless you're referring to something completely outside SAML.
Either way, passing data via AJP to a Java servlet container or not does not alter any of this.
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users