shibboleth SAML released attributes not in HTTP header

[Cantor, Scott]

On 4/17/15, 5:41 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
>
>I know nothing about MS-IIS but the docs say this about the Site element:
>  "Every web site protected by the Shibboleth ISAPI filter MUSTbe listed
>   or the filter will ignore requests to that web site."
>Not sure that means the canonical hostname you establish in Site/@name
>needs to match the hostname you set in Host/@name, but maybe worth a
>try. Strikes me as add that they are different in any case.

It does mean that. The request to the site will be assigned the name in the Site element, and that's the basis of the RequestMap rules.

The purpose of the Site element is to correct for the fact that IIS does not have a way to report a canonical name, which is needed if you want to build content rules that are based on the canonical request. The CGI variables will always contain only and exactly what the client specified in its request.

-- Scott