Getting access to Shib Attributes after initial authentication

[Cantor, Scott]

> I'm still unclear about this. If I change my RequestMapper to
> <Path  authType="shibboleth" /> I get a configuration error.

I didn't say to do that, and that isn't valid, Paths require names. If you want to attach settings to a Host, you put it in the Host element.

> I thought requireSession="true" is needed to trigger SP and get assertion
> from IdP.

If you want to trigger a session for /secure, then do that. You asked how to get the data visible for other content, and the answer is to attach the authType setting to *that* content. With or without requireSession being set, any existing session will be processed and exported for that request.

> Using my current configuration below can you please clarify a bit which
> values to use for each attribute and which ones, if any, I should remove
> completely?

Add authType to the Host. If that doesn't work, then I'm not remembering the code well enough and would have to go do some checking.

-- Scott