Retrieve NameID

[Boyd, Todd M.]

To my knowledge, Shibboleth SP on IIS will not set REMOTE_USER. I built an IIS module that will handle this, but out of the box, it doesn't work. If you'd like, I can supply you with the source code for the module (or just a DLL) with the stipulation that I do not provide technical support.


-Todd


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of George Glessner
Sent: Friday, June 29, 2018 9:39 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: Retrieve NameID

I am using classic ASP. I did dump all headers and that is not there.  In https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess under "Request Headers" it states "On IIS and Sun/iPlanet, the request header mechanism is the only one supported... On these platforms, the SP is forced to substitute the use of custom HTTP request headers." So does that mean I can only use the custom headers provided for me? 

Thank you


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Friday, June 29, 2018 10:25 AM
To: users at shibboleth.net
Subject: Re: Retrieve NameID

* George Glessner <gglessner at serviceexpress.com> [2018-06-29 16:18]:
> In my attribute-map.xml there is
> 
>     <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
>         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
>     </Attribute>
> 
> Does this not build a HTTP header?

No. Not unless you force the software to do so:
By default attributes are exposed as environment variables, not as HTTP Request Headers, at least on Apache httpd.
The documentation explains why. (TL;DR: Because security.)

> Request.servervariables("HTTP_persistent-id")

What kind of API is that?

Also check whether underscores and dashes are not molested/normalized on the conversion to HTTP Request Headers in some way, so the name may not be exactly that.

As Scott already told you in another thread recently:

* Cantor, Scott <cantor.2 at osu.edu> [2018-06-28 22:06]:
> On IIS the safeHeaderNames option will collapse the punctuation in the 
> header names, the wiki discusses that. Don't know that that's your 
> issue, but it's possible.
> 
> Dump your headers with a loop and you'll know what's there or not.

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net