Hong, > This application uses tomcat I assume you're also using httpd or IIS. Are you using mod_proxy_ajp? Are the variables visible there? You can test that out quickly with a <? phpinfo(); ?> script. If they are, then I think this is a question more for the vendor than for Shibboleth, which is acting as it should. Best, Nate.