Need Help Regarding Query Matching

[Ram, Budh]

> Now I have one application path 
>    www.usphlvm2556.dmzphl.sap.corp:1080/vlm?ID=xyz which I want to 
> make unprotected (without authentication I want to access it). I tried 
> query matching which is given below the it stopped protecting

----------------------------
---Well, you told it to stop requiring a session for the path, and you included two siblings that have the same Path (not allowed, and the log will tell ----you that).

---If you want to require a session for the path and unset that for the query, you require it on the Path and override it to false in the Query element.

---Of course, that's almost always a huge mistake. If you can override the requirement with a parameter, it's very hard to avoid application bugs that would lead to a leak.

Thanks Scott!

Yes I understand, but the requirement is like which I had explained to you. I did not find any other way instead of using query element, maybe I do not know all the options available in Shibboleth SP.

The same resource (directory on IIS) should be protected for some scenarios but needs to be unprotected in others.  From wiki I got this point of using query element and setting requiresession=false  and differentiate both cases.

It would be of great help if you can suggest some better way to achieve it.

Thanks,
Budh ram