shibboleth SAML released attributes not in HTTP header

Gus Braz gus at t-bone.com.au
Fri Apr 17 02:30:41 EDT 2015


Hi there,

I have been successful at reading my Attributes from
/Shibboleth.sso/Session however these aren't coming through in the HTTP
Header.

I'm using Windows Server 2012 R2 and IIS 8

Here's a copy of my shibboleth2.xml.

Any suggestions would be highly appreciated.

Thanks, Gus

<InProcess logger="native.logger" checkSpoofing="true">
    <ISAPI normalizeRequest="true" safeHeaderNames="true">

        <Site id="1" name="samltesttoyota.cloudapp.net">
            <Alias>mysite.cloudapp.net</Alias>
        </Site>

    </ISAPI>
</InProcess>

<RequestMapper type="Native">
    <RequestMap applicationId="default" exportStdVars="true">

        <Host name="mysite.cloudapp.net">
            <Path name="secure" authType="shibboleth"
requireSession="true" exportAssertion="true"/>
        </Host>

   </RequestMap>
</RequestMapper>


<ApplicationDefaults entityID="https://mysite.cloudapp.net/Shibboleth"
REMOTE_USER="sn">


    <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
              checkAddress="true" handlerURL="/Shibboleth.sso"
handlerSSL="false" cookieProps="; path=/;"  idpHistory="true"
idpHistoryDays="7">


        <SSO entityID="https://test.sso.mysite.com.au/idp/external/mysitebrand"
 >
          SAML2
        </SSO>

       <Logout>SAML2 Local</Logout>

       <Handler type="Status" Location="/Status" />

       <Handler type="Session" Location="/Session" showAttributeValues="true"/>

       <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        <Handler type="AttributeChecker" Location="/AttrChecker"
template="attrChecker.html"
                flushSession="true">
            <AND>
                <Rule require="sn"/>
                <Rule require="givenName"/>
            </AND>
        </Handler>

    </Sessions>

    <Errors supportContact="root at localhost"
        helpLocation="/about.html"
        styleSheet="/shibboleth-sp/main.css"/>


    <MetadataProvider type="XML" file="idp_meta.xml"/>

  <AttributeExtractor type="XML" validate="true" reloadChanges="true"
path="attribute-map.xml"/>

    <AttributeExtractor type="Assertion"
Issuer="Shib-Identity-Provider"
AuthnInstant="Shib-Authentication-Instant"
AuthnContextClassRef="Shib-AuthnContext-Class"
AuthnContextDeclRef="Shib-AuthnContext-Decl"
SessionIndex="Shib-Session-Index"/>

    <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>

    <CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>


</ApplicationDefaults>

<SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/>

<ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/6c14a96c/attachment-0001.html 


More information about the users mailing list