Getting access to Shib Attributes after initial authentication

[Cantor, Scott]

On 4/17/15, 1:26 PM, "Guy Tadi" <tadiguy812 at gmail.com> wrote:

>Thanks for the response. The Cookies path defaulting to path=/ is OK because that's where my application resides (in fact, I explicitly set the cookieProp in the shib config to path=/). However, I can't require Shibsession for / due to legacy constraints.

You don't have to require a session. require shibboleth is a dummy rule that just activates the SP lazily. There's no reason that shouldn't work for you.

> I agree that Shib SP doesn't see the request to / because nothing tells the webserver to require SP for / which is exactly how I want it. However, by inpsection I determined that HTTP_COOKIE=_shibsession_randomstring=SHIB_SESSION_ID and so was hoping to use the SHIB_SESSION_ID to get attributes previously exported to the session cache during the initial access to /secure. Is that possible?

Not really. Not practically anyway.

-- Scott