Shib SP to IDP missing header for CORS

[Cantor, Scott]

On 8/14/20, 2:30 PM, "users on behalf of Allan West" <users-bounces at shibboleth.net on behalf of allan at ufl.edu> wrote:

>    I am definitely seeing an absence of headers in the SP to IdP redirect
>    that exist in other pages returned from that site.

Perhaps Apache is skipping the commands that would be running to get the headers added (I assume via mod_headers commands). But the SP isn't removing them. That's all I said at the time, or would say now. I can't get them set, I can only reirerate it's not removing them.

-- Scott