Getting access to Shib Attributes after initial authentication

[Cantor, Scott]

> This is what I have in the RequestMapper:

I know that, and I told you what to add to address the rest of the content. Set authType alone. That should be sufficient.

> If I access https://hostname/documentroot/secure I do see all the shib
> attributes. However, the application that needs to consume the attributes is
> in https://hostname/documentroot but due to other constraints I can't
> require session for /documentroot.

And I know that also, and as I told you, you don't have to. Just set authType.

-- Scott