unable to capture eppn information from SAML2/POST at SP

Brent Putman putmanb at georgetown.edu
Mon Jun 11 17:46:27 EDT 2018



On 6/11/18 5:36 PM, O'Quinn, Dennis wrote:
> Attributes
> eppn: 1 value(s)
>
>
> However, I cannot find a way to 'see' the value in the eppn variable


On the Session handler in shibboleth2.xml, add the boolean attribute:

<Handler type="Session" Location="/Session" *showAttributeValues="true"*/>

as documented here:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler#NativeSPHandler-SessionHandler



>  nor whether that value was propagated to the REMOTE_USER variable (which I suspect didn't happen since I am still not getting the expected response in my application)....

To check REMOTE_USER or any other variable, just use a simple CGI
script which prints the environment variables.

But basically check that the appropriate config in shibboleth2.xml is
correct:

    <ApplicationDefaults
entityID="https://sp.test.middleware.georgetown.edu/shibboleth"
                         *REMOTE_USER="eppn persistent-id targeted-id"*>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180611/4a518b7c/attachment.html>


More information about the users mailing list