Get Attributes from PHP

reda sabir sabiretude at gmail.com
Mon May 23 09:26:32 EDT 2016


Hello everyone,

I'm facing the following issue: I succeed at configuring my SP so I can
authenticate with IdP and I can get the attributes by checking
/Shibboleth.sso/Session. But the problem is when I try to access this
attribute from Php I fail. My php look like this:

> <?php
> session_start();
> print_r($_SESSION);
>

My Httpd.conf have this setting:

> #wso2
> <VirtualHost *:80>
>              DocumentRoot "/var/www/html/"
>              ServerName wso2.shibboleth.example.com
>               <Location /secure>
>                       AuthType shibboleth
>                       ShibRequestSetting requireSession 1
>                       ShibRequestSetting entityID wso2
>                       ShibRequireSession On
>                       ShibUseHeaders On
>                       require shib-session
>               </Location>
>               <Location /Shibboleth.sso>
>                         Satisfy Any
>                         Allow from all
>               </Location>
>               <Location />
>                            AuthType shibboleth
>                            Require shibboleth
>               </Location>
> </VirtualHost>
>

Shibboleth2.xml  :

> <SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
>     xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
>     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
>     xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>     xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
>     clockSkew="180">
>
>   <ApplicationDefaults
>      entityID="sp.shibboleth.example.com"
>      REMOTE_USER="eppn persistent-id targeted-id">
>
>     <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
>               checkAddress="false" handlerURL="/Shibboleth.sso"
> handlerSSL="false" cookieProps="; path=/; domain=example.com">
>         <SSO>
>           SAML2
>         </SSO>
>         <Logout>SAML2 Local</Logout>
>         <Handler type="MetadataGenerator" Location="/Metadata"
> signing="false"/>
>         <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
>         <Handler type="Session" Location="/Session"
> showAttributeValues="false"/>
>         <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
>     </Sessions>
>
>     <MetadataProvider type="Chaining">
>       <MetadataProvider type="XML" validate="true"
> file="/etc/shibboleth/openam_metadata.xml"/>
>       <MetadataProvider type="XML" validate="true"
> file="/etc/shibboleth/wso2_metadata.xml"/>
>     </MetadataProvider>
>
>     <AttributeExtractor type="XML" validate="true" reloadChanges="false"
> path="attribute-map.xml"/>
>     <AttributeResolver type="Query" subjectMatch="true"/>
>     <AttributeFilter type="XML" validate="true"
> path="attribute-policy.xml"/>
>
>   </ApplicationDefaults>
>   <SecurityPolicyProvider type="XML" validate="true"
> path="security-policy.xml"/>
>   <ProtocolProvider type="XML" validate="true" reloadChanges="false"
> path="protocols.xml"/>
>
> </SPConfig>
>

What is missing in my config?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160523/67c0ddc6/attachment-0001.html>


More information about the users mailing list