IIS 7.5 web application, SP and shibboleth2.xml - ApplicationOverride not taking precedence over ApplicationDefaults

Haer, Neelam nklhaer at mail.ubc.ca
Tue Sep 9 13:08:47 EDT 2014


Just a small correction, as I masked out parts of the urls:  see below, question is still the same:

I'm trying to get a client setup on IIS7.5, Windows 8 server with the latest 64-bit version of Shibboleth SP.

The trouble I'm having is very strange and I have not seen this before.  For some reason, the SP (?) is only sending over the

ApplicationDefaults settings (which we typically leave as the defaults and do not use) instead of the ApplicationOverride.

What I mean by that is:

<ApplicationDefaults id="default" policyId="default"
        entityID="https://server.com/do-not-use"
        homeURL="https://server.com/"
        REMOTE_USER="eppn persistent-id targeted-id"
        signing="true" encryption="false"
        >
Is used instead of:
<ApplicationOverride id="rename--my-application-name"
                             entityID="https://client-id/shibboleth"
                             homeURL="https://client-url/locked"
                             REMOTE_USER="somerandomstring" >
          <Sessions handlerURL="/locked/Shibboleth.sso"
                    handlerSSL="true"
                    cookieProps="; path=/locked; secure"
                    checkAddress="false"
                    lifetime="7200" timeout="3600" />
        </ApplicationOverride>

Does anyone know why this is the case?

Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140909/ff122e60/attachment.html 


More information about the users mailing list