Can a Shibboleth service provider present itself as a SAML identity provider for federation?

Peter Schober peter.schober at
Wed Apr 24 11:05:30 EDT 2019

* Graham Leggett <minfrin at> [2019-04-24 17:00]:
> So AJP is the preferred method to pass information from Shibboleth
> to Java?

Yes, that provides the highest fidelity (no translation of decoded
information -- attribute values -- to HTTP Request Headers) and
If the Java servlet container of your choice doesn't support AJP (I
think Jetty doesn't anymore?) yuo can still make it work with HTTP
Request Headers, but it's not "preferred".


More information about the users mailing list