RemoteUser authnMethodHeader example?

[Liam Hoekenga]

I've put this in under the <web-app> element in web.xml and rebuilt my war
file, and it doesn't seem to be picking it up..

    <context-param>
        <param-name>authnMethodHeader</param-name>
        <param-value>UMAuthnContext</param-value>
    </context-param>

Liam

On Tue, Feb 7, 2017 at 8:46 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Couldn't someone insert an illicit header on the browser side?
>
> If you don't use a header that your external method adequately controls.
> If you don't configure a header to check, it doesn't look. It's there for
> people with systems capable of safely utilizing it, often involving
> proxying where you might have tight controls over things.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170207/5b6cf2a3/attachment.html>