Programmatic Access to SP Attributes

[Boyd, Todd M.]

If you don't see it in ALL_HTTP, then it's not there as a header.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Chanda Banda <chandabnd727 at googlemail.com>
Sent: Tuesday, January 30, 2018 8:53:46 AM
To: Shib Users
Subject: Re: Programmatic Access to SP Attributes

I have, its got tons of stuff in it - but nothing useful to me.



On Tue, Jan 30, 2018 at 2:50 PM, Boyd, Todd M. <tmboyd1 at ccis.edu<mailto:tmboyd1 at ccis.edu>> wrote:
Check what's in Request.ServerVariables("ALL_HTTP"). It's worth a shot.
________________________________
From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of Chanda Banda <chandabnd727 at googlemail.com<mailto:chandabnd727 at googlemail.com>>
Sent: Tuesday, January 30, 2018 8:48:47 AM
To: Shib Users
Subject: Re: Programmatic Access to SP Attributes

Thanks for your reply.

So I tried:

Response.Write(Request.ServerVariables("HTTP_DISPLAYNAME") & "<br><br>")
Response.Write(Request.ServerVariables("HTTP_AFFILIATION") & "<br><br>")
Response.Write(Request.ServerVariables("HTTP_ENTITLEMENT") & "<br><br>")
Response.Write(Request.ServerVariables("HTTP_EPPN") & "<BR><Br>")
Response.Write(Request.ServerVariables("HTTP_PERSISTENT-ID") & "<br><br>")

But still no luck.... I must be missing something somewhere...gggrrr...

On Tue, Jan 30, 2018 at 2:34 PM, Boyd, Todd M. <tmboyd1 at ccis.edu<mailto:tmboyd1 at ccis.edu><mailto:tmboyd1 at ccis.edu<mailto:tmboyd1 at ccis.edu>>> wrote:
You can probably access them as Request.ServerVariables("HTTP_<header name>"). Make sure the header name is all caps, and spaces are replaced with underscores (though I think Shib strips the spaces for its injected headers).


-Todd

________________________________
From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net><mailto:users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>>> on behalf of Chanda Banda <chandabnd727 at googlemail.com<mailto:chandabnd727 at googlemail.com><mailto:chandabnd727 at googlemail.com<mailto:chandabnd727 at googlemail.com>>>
Sent: Tuesday, January 30, 2018 8:32:49 AM
To: Shib Users
Subject: Re: Programmatic Access to SP Attributes

Thanks for your reply.

> see the Request.Headers() approach
Im using ASP - there is no Request.Headers property.

> you have no session
When i look at Shibboleth.sso/Session I DO see attributes and their values?

> any content protection rules set up for the script in question
how any where do i do this? my attribute-map.xml contains:

    <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>


On Tue, Jan 30, 2018 at 2:22 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu><mailto:cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>><mailto:cantor.2 at osu.edu<mailto:cantor.2 at osu.edu><mailto:cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>>>> wrote:
> I cant seem to get a handle on the attributes - no matter what I try.

What you're trying is discouraged, for starters. Use the Request.Headers() approach. Secondly, you probably have no data because you have no session or any content protection rules set up for the script in question.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net><mailto:users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>><mailto:users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net><mailto:users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>>>

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net><mailto:users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>>

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>