Shib SP to IDP missing header for CORS

[Allan West]

On 2020/08/14 5:17 PM, Cantor, Scott wrote:
> [External Email]
>
> On 8/14/20, 2:30 PM, "users on behalf of Allan West" <users-bounces at shibboleth.net on behalf of allan at ufl.edu> wrote:
>
>>    I am definitely seeing an absence of headers in the SP to IdP redirect
>>    that exist in other pages returned from that site.
> Perhaps Apache is skipping the commands that would be running to get the headers added (I assume via mod_headers commands). But the SP isn't removing them. That's all I said at the time, or would say now. I can't get them set, I can only reirerate it's not removing them.
>
> -- Scott

That's fair. I can't get the CORS headers set on the redirect to the
IdP, after trying several flavors of edits to the apache config. Has
anyone else seen this problem and found a solution?
Thanks, Allan