shibboleth SAML released attributes not in HTTP header
Gus Braz
gus at t-bone.com.au
Sun Apr 19 21:04:44 EDT 2015
I found the solution guys:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRequestMapHowTo
The issue was that from:
<RequestMapper type="Native">
<RequestMap applicationId="default" exportStdVars="true">
<Host name="mysite.cloudapp.net">
<Path name="secure" authType="shibboleth"
requireSession="true" exportAssertion="true"/>
</Host>
</RequestMap>
</RequestMapper>
The path="secure" means that I'd only be able to find the Shibboleth
Session attributes inside the 'secure' folder, i.e. https://
mysite.cloudapp.net/secure/default.aspx but not inside the root https://
mysite.cloudapp.net/default.aspx
Thanks Peter and Scott for your replies.
Cheers,
Gus
On Sat, Apr 18, 2015 at 12:17 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 4/17/15, 5:41 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >
> >I know nothing about MS-IIS but the docs say this about the Site element:
> > "Every web site protected by the Shibboleth ISAPI filter MUSTbe listed
> > or the filter will ignore requests to that web site."
> >Not sure that means the canonical hostname you establish in Site/@name
> >needs to match the hostname you set in Host/@name, but maybe worth a
> >try. Strikes me as add that they are different in any case.
>
> It does mean that. The request to the site will be assigned the name in
> the Site element, and that's the basis of the RequestMap rules.
>
> The purpose of the Site element is to correct for the fact that IIS does
> not have a way to report a canonical name, which is needed if you want to
> build content rules that are based on the canonical request. The CGI
> variables will always contain only and exactly what the client specified in
> its request.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
--
Gus Braz, PhD
Software Engineer
T-bone Productions
Level 7, 61 York St
Sydney, NSW, 2000
Ph: +61 2 9259 8333
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150420/ebe4f7d7/attachment.html>
More information about the users
mailing list