AW: AW: AW: exportAssertion not working

[Kevin Flückiger]

Thank you Peter for clarifying things up.
So is trying to get the SAML-Assertion on to the users computer where the application is running considered bad practice? IF not, how should it be done?


-----Ursprüngliche Nachricht-----
Von: users [mailto:users-bounces at shibboleth.net] Im Auftrag von Peter Schober
Gesendet: Donnerstag, 30. April 2015 15:48
An: users at shibboleth.net
Betreff: Re: AW: AW: exportAssertion not working

* Kevin Flückiger <kevin.flueckiger at inovitas.ch> [2015-04-30 15:38]:
> Ok, I see that I probably misunderstood the concept with the headers. 
> The headers, when enabled, will not get sent back to the user but from 
> the SP to the apache, is this correct?

When you read about headers in the Shibboleth documentation it's short for HTTP Request Headers (not Reponse Headers, sent to the HTTP User Agent), and there should be no need for you to change the way the Shib SP exposes attributes (and their values) to the web server via environment variables to HTTP Request Headers.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net