shibboleth SAML released attributes not in HTTP header

Gus Braz gus at t-bone.com.au
Sun Apr 19 21:04:44 EDT 2015


I found the solution guys:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRequestMapHowTo

The issue was that from:

<RequestMapper type="Native">
    <RequestMap applicationId="default" exportStdVars="true">

        <Host name="mysite.cloudapp.net">
            <Path name="secure" authType="shibboleth"
requireSession="true" exportAssertion="true"/>
        </Host>

   </RequestMap>
</RequestMapper>

The path="secure" means that I'd only be able to find the Shibboleth
Session attributes inside the 'secure' folder, i.e. https://
mysite.cloudapp.net/secure/default.aspx but not inside the root https://
mysite.cloudapp.net/default.aspx

Thanks Peter and Scott for your replies.

Cheers,

Gus




On Sat, Apr 18, 2015 at 12:17 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/17/15, 5:41 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >
> >I know nothing about MS-IIS but the docs say this about the Site element:
> >  "Every web site protected by the Shibboleth ISAPI filter MUSTbe listed
> >   or the filter will ignore requests to that web site."
> >Not sure that means the canonical hostname you establish in Site/@name
> >needs to match the hostname you set in Host/@name, but maybe worth a
> >try. Strikes me as add that they are different in any case.
>
> It does mean that. The request to the site will be assigned the name in
> the Site element, and that's the basis of the RequestMap rules.
>
> The purpose of the Site element is to correct for the fact that IIS does
> not have a way to report a canonical name, which is needed if you want to
> build content rules that are based on the canonical request. The CGI
> variables will always contain only and exactly what the client specified in
> its request.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Gus Braz, PhD
Software Engineer

T-bone Productions

Level 7, 61 York St
Sydney, NSW, 2000

Ph: +61 2 9259 8333
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150420/ebe4f7d7/attachment.html>


More information about the users mailing list