Access Attributes from ColdFusion 10 on IIS 7.5
peter.schober at univie.ac.at
Tue Apr 19 07:28:46 EDT 2016
* voidinutah <marc at oneleaf.com> [2016-04-19 08:11]:
> I found my issue, and it was a misunderstanding on my part of how I thought
> the request header would work. I now realize that it will not be available
> to the entire application, meaning any page below the root site. But only to
> the section(s) defined in the RequestMapper section of shibboleth2.xml.
> Just so I understand, if I defined a path, then that is the only location
> that will have the shibboleth attributes available to me? Is there a way to
> have a path for requiring shibboleth authentication, but have another path
> that would have access to those same attributes?
Yes, using lazy sessions / passive protection. For Apache httpd that
would be done using directives like the following:
ShibRequestSetting requireSession 0
For MS-IIS I'd have to defer you to the documentation.
More information about the users