Shib-Authentication-Instant via mod_proxy_ajp

[Peter Schober]

1;3201;0c* Robert Lowe <robertmlowe at rmlowe.com> [2016-08-17 11:59]:
> I have a Tomcat application that needs to make use of
> Shib-Authentication-Instant. I am using mod_proxy_ajp.
> 
> Unfortunately mod_proxy_ajp only forwards environment variable that
> start with AJP_
> 
> For SAML attributes that's not a problem as I can obviously choose
> the local name in attribute-map.xml.

No need to do even that. Nate pointed to you the relevant
documentation: It's as easy as setting
ApplicationDefaults/@attributePrefix="AJP_" once and be done with it.

Not only does that make all data structures available, it also
prevents you from introducing noise into your attribute-map.xml by
manually prefixing all attribute names only to satisfy some technical
downstream requirement.

I'd also forget about mod_jk and mod_rewrite, there's no upside to
those methods over using the feature the SP provides specifically for
that use-case.
-peter