Getting access to Shib Attributes after initial authentication

[Guy Tadi]

This is what I have in the RequestMapper:

<Path name="secure" authType="shibboleth" requireSession="true"
exportAssertion="true" />

If I access https://hostname/documentroot/secure I do see all the shib
attributes. However, the application that needs to consume the attributes
is in https://hostname/documentroot but due to other constraints I
can't require session for /documentroot. The client is guaranteed to go to
https://hostname/documentroot/secure on first access for SSO before
returning to the application in the root.

On Fri, Apr 17, 2015 at 2:01 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/17/15, 1:55 PM, "Guy Tadi" <tadiguy812 at gmail.com> wrote:
>
> >Thanks. Can you please clarify a bit what you mean by "You don't have to
> require a session... There's no reason that shouldn't work for you." Are
> you suggesting if I require shibboleth session for "/secure" I should have
> access to the Shib session variables when the same browser instance later
> accesses "/" or you are suggesting that I use Lazy session? I'm using
> Lighttpd so I'm using the RequestMapper to set the session.
>
> We assumed you were using Apache, so that probably confused matters. I
> believe in the RequestMapper if you just set authType for the content you
> need to see the attributes under, that should get it turned on and
> populated. Has nothing to do with whether you use lazy sessions or not down
> below, the point is that if authType's not set, the SP won't export the
> data.
>
> Under Apache there's a particular trick to that, but setting authType
> alone without requireSession should address it.
>
> Also, you don't need to change cookieProps and should not do so. It should
> be set to https or http depending on SSL needs.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/48cfffd0/attachment-0001.html