Getting access to Shib Attributes after initial authentication

[Guy Tadi]

I'm still unclear about this. If I change my RequestMapper to
<Path  authType="shibboleth" /> I get a configuration error.

I thought requireSession="true" is needed to trigger SP and get assertion
from IdP. If I use
<Path name="secure" authType="shibboleth"  />
or
<Path name="secure" authType="shibboleth" exportAssertion="true"  />
or
<Path name="secure" authType="shibboleth" requireSession="false"
exportAssertion="true" />

the SP never redirects the session to the IdP and so I can access /secure
without any Shib session attributes.

Using my current configuration below can you please clarify a
bit which values to use for each attribute and which ones, if any, I should
remove completely?

<Path name="secure" authType="shibboleth" requireSession="true"
exportAssertion="true" />

 Thanks for the help.

On Fri, Apr 17, 2015 at 3:54 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > This is what I have in the RequestMapper:
>
> I know that, and I told you what to add to address the rest of the
> content. Set authType alone. That should be sufficient.
>
> > If I access https://hostname/documentroot/secure I do see all the shib
> > attributes. However, the application that needs to consume the
> attributes is
> > in https://hostname/documentroot but due to other constraints I can't
> > require session for /documentroot.
>
> And I know that also, and as I told you, you don't have to. Just set
> authType.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/50b343fb/attachment.html