To slightly thread-hijack > To my knowledge, Shibboleth SP on IIS will not set REMOTE_USER. Correct in V2. In V3 there will be a new plugin which only works on IIS >= 7 which does this.