SP ReverseProxy no attributes

[Cantor, Scott]

On 2/22/17, 12:56 PM, "users on behalf of Nathan Hughes" <users-bounces at shibboleth.net on behalf of nathan.hughes at badgepass.com> wrote:

> So I need to use Apache commands to set the attributes, received by the IdP, to the request header that is proxied to my
> resource after authentication.

The SP has already digested everything from the IdP by the time anything you do happens, that's the point of using it. You're operating on requests that contain CGI variables exported by the SP based on the attribute mapping you tell it to do against the SAML it processed.

> What do you mean by your example: 'system/environment variable data set on the front-end'

SetHeader commands can pull data from the CGI environment, which is where the SP puts the data it attaches to the requests. I have no particular experience or much of any advice on doing it, that's just how reverse proxying, and specifically Apache proxying, is done.

-- Scott