Headers are missing in response from IdP

Cantor, Scott cantor.2 at osu.edu
Mon Jun 5 15:54:27 EDT 2017


> I am doing the upgradation of Shibboleth version from 2.4 to 2.6
> 
> I have made the necessary changes in the SPMetadata and in other
> configuration files.

There aren't any required changes. There are things you can do, but none of them are strictly required and almost nothing is really a big deal going from 2.4, as that was the big cleanup IIRC.

So the best answer is, stop what you're doing and undo all of it so you're running an upgraded system with the same configuration and only make changes once it works again.

> Though user is successfully authenticated, I am not receiving proper
> Headers(Shib Attributes and User Information) from Idp.

The logs will tell you anything you need to know about what it's getting and what it's doing with what it's getting.

> What could be the possible reason? Is there anything wrong in Configuration
> (SP/IdP).

Hundreds of reasons, I'm not going to just guess. You haven't even identified a platform. If you're using Apache, you shouldn't use headers to start with if you can avoid it.

-- Scott




More information about the users mailing list