Passing Shibboleth SP Headers to Tomcat on IIS 7 with Tomcat Connector

Cantor, Scott cantor.2 at
Fri Sep 19 19:12:58 EDT 2014

On 9/19/14, 7:01 PM, "Gary Gwin" <ggwin at> wrote:
>Shibboleth SP only populates headers when the path above is matched,
>which makes sense. If I map the same path to the Tomcat Connector, then
>Shibboleth SP appears to be bypassed and the request is sent to Tomcat
>directly. I've tried various orderings of the respective ISAPI filters
>with no luck.

If you're seeing the SP redirect and establish a session, then it's not
being bypassed, so there's no guesswork involved. If a fresh access
doesn't redirect away, then it definitely isn't running. If it does, then
it is, and the headers are set.

>Is there a known way to configure Shibboleth SP with IIS 7, the Tomcat
>Connector and Tomcat such that the Shibboleth headers are sent to Tomcat?

I assume the normal way just works, it certainly has for others.

>Or, is there an alternative way for a Servlet in Tomcat to get a handle
>to such Shibboleth information?


-- Scott

More information about the users mailing list