shibboleth SAML released attributes not in HTTP header

Peter Schober peter.schober at univie.ac.at
Fri Apr 17 05:41:20 EDT 2015


* Gus Braz <gus at t-bone.com.au> [2015-04-17 08:32]:
> <InProcess logger="native.logger" checkSpoofing="true">
>     <ISAPI normalizeRequest="true" safeHeaderNames="true">
> 
>         <Site id="1" name="samltesttoyota.cloudapp.net">
>             <Alias>mysite.cloudapp.net</Alias>
>         </Site>
> 
>     </ISAPI>
> </InProcess>
> 
> <RequestMapper type="Native">
>     <RequestMap applicationId="default" exportStdVars="true">
> 
>         <Host name="mysite.cloudapp.net">
>             <Path name="secure" authType="shibboleth"
> requireSession="true" exportAssertion="true"/>
>         </Host>
> 
>    </RequestMap>
> </RequestMapper>

I know nothing about MS-IIS but the docs say this about the Site element:
  "Every web site protected by the Shibboleth ISAPI filter MUSTbe listed
   or the filter will ignore requests to that web site."
Not sure that means the canonical hostname you establish in Site/@name
needs to match the hostname you set in Host/@name, but maybe worth a
try. Strikes me as add that they are different in any case.
-peter


More information about the users mailing list