Hi,
I am using Shibboleth SP for SSO implementation in my application (application is running on IIS7.5).
I have one application path www.usphlvm2556.dmzphl.sap.corp:1080 /vlm<http://%20www.usphlvm2556.dmzphl.sap.corp:1080%20/vlm> which is protected. I have done below configuration in shibboleth2.xml file and it is working perfectly fine.
<Host name="usphlvm2556.dmzphl.sap.corp" port="1080">
<Path name="vlm" authType="shibboleth" requireSession="true">
</Path>
</Host>
Now I have one application path www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz<http://www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz> which I want to make unprotected (without authentication I want to access it). I tried query matching which is given below the it stopped protecting www.usphlvm2556.dmzphl.sap.corp:1080/vlm<http://%20www.usphlvm2556.dmzphl.sap.corp:1080%20/vlm> (first above scenario which I want to be protected)
<Host name="usphlvm2556.dmzphl.sap.corp" port="1080">
<Path name="vlm" authType="shibboleth" requireSession="false">
<Query name="ID">
</Query>
</Path>
<Path name="vlm" authType="shibboleth" requireSession="true">
</Path>
</Host>
Could you please suggest me the correct way of configuring it so that both scenarios can be handled.
Thanks,
Budh ram
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160713/a612f6fe/attachment.html>