NativeSPApplicationOverride - Troubleshooting help

[Cantor, Scott]

> With this being said (in sprite of the mention of "Assuming you're unlucky
> and actually need to create an additional application in the configuration"),
> we are running into a problem where our second application is not displaying
> the header attributes that come from the SAML assertion.

Platform / web server?
How are the content settings applied to the content?
Active vs. lazy/passive session requirements?
Vhost vs. path-based override?

If you can access content, there's a session there, or you're not requiring one. Obviously there are no attributes if there's no session. So I'm guessing it's passive and you're not requiring one, so the reason there are no attributes is there is no session. In which case you have logs that will document why a session is or isn't being created or validated for use.

> What is strange is that we have defined a second entityID for the second app
> but if we look within the SAMLRequest, it places the default app's entityId.

That means the applicationId setting you want it to use isn't being applied to the URL that's causing it to generate the request, it's mapping the URL to the default applicationId.
 
> I was wondering if you by chance had a moment for us to bounce some
> questions off of you/validate our sanity when it comes to the different files
> associated to the Shibboleth SP Module?

You have to ask the questions here, that's the purpose of the list.
 
-- Scott