Custom Headers on SP responses

Thu Mar 17 11:38:59 EDT 2016

Hi all,

I'm still trying to set custom Headers (CORS Headers to be precisely) on SP responses. I'm trying to set headers on apache 2.4 with the <Location "/"> directive. So basically every response from this server should get my custom Headers attached. This works fine for every request except when mod_shib intercepts the requests.
After login for example I can access shibboleth protected resources and the headers are always there. If I access /Shibboleth.sso/Session, no headers are attached (the same for every other SP Endpoint). Is this behavior on purpose? I believe it shouldn't be like this, should it?

Thanks for your help in advance!
Kevin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160317/ba09662d/attachment-0001.html>