Access Attributes from ColdFusion 10 on IIS 7.5

[Peter Schober]

* voidinutah <marc at oneleaf.com> [2016-04-19 08:11]:
> I found my issue, and it was a misunderstanding on my part of how I thought
> the request header would work. I now realize that it will not be available
> to the entire application, meaning any page below the root site. But only to
> the section(s) defined in the RequestMapper section of shibboleth2.xml.
> 
> Just so I understand, if I defined a path, then that is the only location
> that will have the shibboleth attributes available to me? Is there a way to
> have a path for requiring shibboleth authentication, but have another path
> that would have access to those same attributes?

Yes, using lazy sessions / passive protection. For Apache httpd that
would be done using directives like the following:
  AuthType shibboleth
  ShibRequestSetting requireSession 0
  require shibboleth
For MS-IIS I'd have to defer you to the documentation.
-peter