shibboleth SAML released attributes not in HTTP header
Gus Braz
gus at t-bone.com.au
Fri Apr 17 02:30:41 EDT 2015
Hi there,
I have been successful at reading my Attributes from
/Shibboleth.sso/Session however these aren't coming through in the HTTP
Header.
I'm using Windows Server 2012 R2 and IIS 8
Here's a copy of my shibboleth2.xml.
Any suggestions would be highly appreciated.
Thanks, Gus
<InProcess logger="native.logger" checkSpoofing="true">
<ISAPI normalizeRequest="true" safeHeaderNames="true">
<Site id="1" name="samltesttoyota.cloudapp.net">
<Alias>mysite.cloudapp.net</Alias>
</Site>
</ISAPI>
</InProcess>
<RequestMapper type="Native">
<RequestMap applicationId="default" exportStdVars="true">
<Host name="mysite.cloudapp.net">
<Path name="secure" authType="shibboleth"
requireSession="true" exportAssertion="true"/>
</Host>
</RequestMap>
</RequestMapper>
<ApplicationDefaults entityID="https://mysite.cloudapp.net/Shibboleth"
REMOTE_USER="sn">
<Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
checkAddress="true" handlerURL="/Shibboleth.sso"
handlerSSL="false" cookieProps="; path=/;" idpHistory="true"
idpHistoryDays="7">
<SSO entityID="https://test.sso.mysite.com.au/idp/external/mysitebrand"
>
SAML2
</SSO>
<Logout>SAML2 Local</Logout>
<Handler type="Status" Location="/Status" />
<Handler type="Session" Location="/Session" showAttributeValues="true"/>
<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
<Handler type="AttributeChecker" Location="/AttrChecker"
template="attrChecker.html"
flushSession="true">
<AND>
<Rule require="sn"/>
<Rule require="givenName"/>
</AND>
</Handler>
</Sessions>
<Errors supportContact="root at localhost"
helpLocation="/about.html"
styleSheet="/shibboleth-sp/main.css"/>
<MetadataProvider type="XML" file="idp_meta.xml"/>
<AttributeExtractor type="XML" validate="true" reloadChanges="true"
path="attribute-map.xml"/>
<AttributeExtractor type="Assertion"
Issuer="Shib-Identity-Provider"
AuthnInstant="Shib-Authentication-Instant"
AuthnContextClassRef="Shib-AuthnContext-Class"
AuthnContextDeclRef="Shib-AuthnContext-Decl"
SessionIndex="Shib-Session-Index"/>
<AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
<CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>
</ApplicationDefaults>
<SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/>
<ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/6c14a96c/attachment-0001.html
More information about the users
mailing list