Apache proxy to IIS

[Chad Phillips]

Hi,

I new to Shibboleth.  I have an Apache server with the SP installed.  It
works fine.  We have one application that runs on IIS.  For that
application, I have Apache reverse proxy to IIS.

If I set:
ShibUseHeaders On

Then the request headers get sent to IIS, and the .Net application reads
them just fine.

But I read that I should not use request headers.

Does that apply to IIS though?
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess#NativeSPAttributeAccess-RequestHeaders

"On IIS and Sun/iPlanet, the request header mechanism is the only one
supported."

So in my case, where the SP runs on Apache, but traffic is then reverse
proxied off to IIS, is there any other option than turning ShibUserHeaders
on?

thanks
chad
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180522/833f8fce/attachment.html>