Need Help Regarding Query Matching

[Cantor, Scott]

On 7/13/16, 6:25 AM, "users on behalf of Ram, Budh" <users-bounces at shibboleth.net on behalf of budh.ram at sap.com> wrote:

> Now I have one application path 
>    www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz which I want to make unprotected
> (without authentication I want to access it). I tried query matching which is given below
> the it stopped protecting


Well, you told it to stop requiring a session for the path, and you included two siblings that have the same Path (not allowed, and the log will tell you that).

If you want to require a session for the path and unset that for the query, you require it on the Path and override it to false in the Query element.

Of course, that's almost always a huge mistake. If you can override the requirement with a parameter, it's very hard to avoid application bugs that would lead to a leak.

-- Scott