Shib SP to IDP missing header for CORS
cantor.2 at osu.edu
Mon Aug 17 14:15:07 UTC 2020
I thought this rang a bell, I found , which was somebody complaining about the issue, and the upshot was that when I tested various ways of getting the headers set, it always worked, but the specific example that somebody posted to the wiki about doing this for CORS did not for whatever obscure reason.
More information about the users