Shib SP to IDP missing header for CORS
allan at ufl.edu
Mon Aug 17 12:04:53 UTC 2020
On 2020/08/14 5:17 PM, Cantor, Scott wrote:
> [External Email]
> On 8/14/20, 2:30 PM, "users on behalf of Allan West" <users-bounces at shibboleth.net on behalf of allan at ufl.edu> wrote:
>> I am definitely seeing an absence of headers in the SP to IdP redirect
>> that exist in other pages returned from that site.
> Perhaps Apache is skipping the commands that would be running to get the headers added (I assume via mod_headers commands). But the SP isn't removing them. That's all I said at the time, or would say now. I can't get them set, I can only reirerate it's not removing them.
> -- Scott
That's fair. I can't get the CORS headers set on the redirect to the
IdP, after trying several flavors of edits to the apache config. Has
anyone else seen this problem and found a solution?
More information about the users