Classic .asp Server Variables not available in Shibboleth v3

[Cantor, Scott]

> Our customer reports (and we viewed the results) that they were able to
> access HTTP Headers with classic .asp applications using Shibboleth3 (native
> module) with useHeaders="true".  They are running Windows Server 2019 in
> Azure with IIS 10.  They have .aspx apps on the same host which are able to
> access Server Variables as well.

That's what I've observed. It's unfortunate if for whatever reason the ASP option doesn't work with Server Variables, but since ASP really is just as "legacy" as the old ISAPI interface, it's not overly concerning to me and there really is nothing we could do about it anyway.

I think it's clear enough what's happening to document the limitation.

Note that REMOTE_USER *does* work fine now with ASP, so certainly that's where the core identity should be derived anyway, which helps some with the weaknesses of the header method.

-- Scott