Shibboleth SP in front of HA-Proxy in http mode

[Nate Klingenstein]

Actually, it is in the Shibboleth 3.x Wiki:

https://wiki.shibboleth.net/confluence/display/SP3/Assertion+Export

I suppose it's the sessionCache boolean that has changed from true to false
in the default configuration.  So, the same approach would probably still
work if you enable sessionCaching.

But I didn't ask the obvious question: is there a reason why you're not
just passing the attributes in HTTP headers anyway?

It's too late at night here for me to do any more investigation, but I hope
this gives you somewhere to start.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180910/91cb5bdb/attachment.html>