Shibboleth SP3 and IIS10

[Cantor, Scott]

On 8/28/19, 9:36 AM, "users on behalf of CostantinoGrana" <users-bounces at shibboleth.net on behalf of costantino.grana at unimore.it> wrote:

> So, unless I've missed something it appears to be some kind of bug. 

There isn't.

The ISAPI filter is never going to provide the variables because it can't, only headers. Only the new module supports true server variables (and it does not export headers by default). So you're mixing testing scenarios.

Looping also does not work, at least not for server variables, Microsoft isn't tracking the information at the right time and doesn't see the ones set later, only direct access to them works in my experience.

I'm not on a Windows machine at the moment so I don't have the scripts I've tested with handy but it works. If you want compatibility (and less security) with pre-existing code using headers then you simply have to turn that option on.

-- Scott