Getting access to Shib Attributes after initial authentication

[Cantor, Scott]

On 4/17/15, 1:55 PM, "Guy Tadi" <tadiguy812 at gmail.com> wrote:

>Thanks. Can you please clarify a bit what you mean by "You don't have to require a session... There's no reason that shouldn't work for you." Are you suggesting if I require shibboleth session for "/secure" I should have access to the Shib session variables when the same browser instance later accesses "/" or you are suggesting that I use Lazy session? I'm using Lighttpd so I'm using the RequestMapper to set the session.

We assumed you were using Apache, so that probably confused matters. I believe in the RequestMapper if you just set authType for the content you need to see the attributes under, that should get it turned on and populated. Has nothing to do with whether you use lazy sessions or not down below, the point is that if authType's not set, the SP won't export the data.

Under Apache there's a particular trick to that, but setting authType alone without requireSession should address it.

Also, you don't need to change cookieProps and should not do so. It should be set to https or http depending on SSL needs.

-- Scott