Shib SP to IDP missing header for CORS

Cantor, Scott cantor.2 at
Fri Aug 14 21:17:43 UTC 2020

On 8/14/20, 2:30 PM, "users on behalf of Allan West" <users-bounces at on behalf of allan at> wrote:

>    I am definitely seeing an absence of headers in the SP to IdP redirect
>    that exist in other pages returned from that site.

Perhaps Apache is skipping the commands that would be running to get the headers added (I assume via mod_headers commands). But the SP isn't removing them. That's all I said at the time, or would say now. I can't get them set, I can only reirerate it's not removing them.

-- Scott

More information about the users mailing list