Shib SP to IDP missing header for CORS

Allan West allan at
Mon Aug 17 12:04:53 UTC 2020

On 2020/08/14 5:17 PM, Cantor, Scott wrote:
> [External Email]
> On 8/14/20, 2:30 PM, "users on behalf of Allan West" <users-bounces at on behalf of allan at> wrote:
>>    I am definitely seeing an absence of headers in the SP to IdP redirect
>>    that exist in other pages returned from that site.
> Perhaps Apache is skipping the commands that would be running to get the headers added (I assume via mod_headers commands). But the SP isn't removing them. That's all I said at the time, or would say now. I can't get them set, I can only reirerate it's not removing them.
> -- Scott

That's fair. I can't get the CORS headers set on the redirect to the
IdP, after trying several flavors of edits to the apache config. Has
anyone else seen this problem and found a solution?
Thanks, Allan

More information about the users mailing list