Need Help Regarding Query Matching

Ram, Budh budh.ram at sap.com
Wed Jul 13 06:25:14 EDT 2016


Hi,

I am using Shibboleth SP for SSO implementation in my application (application is running on IIS7.5).
I have one application path  www.usphlvm2556.dmzphl.sap.corp:1080 /vlm<http://%20www.usphlvm2556.dmzphl.sap.corp:1080%20/vlm> which is protected. I have done below configuration in shibboleth2.xml file and it is working perfectly fine.

<Host name="usphlvm2556.dmzphl.sap.corp" port="1080">
                <Path name="vlm" authType="shibboleth" requireSession="true">
</Path>
</Host>

Now I have one application path www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz<http://www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz>  which I want to make unprotected (without authentication I want to access it). I tried query matching which is given below the it stopped protecting  www.usphlvm2556.dmzphl.sap.corp:1080/vlm<http://%20www.usphlvm2556.dmzphl.sap.corp:1080%20/vlm>  (first above scenario which I want to be protected)

<Host name="usphlvm2556.dmzphl.sap.corp" port="1080">
                <Path name="vlm" authType="shibboleth" requireSession="false">
                                <Query name="ID">
                                </Query>
                </Path>
                <Path name="vlm" authType="shibboleth" requireSession="true">
</Path>
</Host>

Could you please suggest me the correct way of configuring it so that both scenarios can be handled.

Thanks,
Budh ram


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160713/a612f6fe/attachment.html>


More information about the users mailing list