Help setting up a Java app protected by a Shib SP?

[Bryan Wooten]

Here is my configuration:

Server A – Docker Shib SP
Server B – Simple Java Servlet running on Tomcat

Server A reverse proxies to the Java url on Server B.

Hitting the Java servlet URL I get re-directed to our IDP and login works.

But for the life of me I can’t seem to be able to find the Attributes being released by the IDP to the SP/app.

I thought they would be simple http headers, but that is wrong. So doing some reading I need to configure both the SP and Tomcat it use AJP? Also there was a thread about tomcat request.getAttributeNames() being broken. So maybe we need to do request.getAttribute(“someName”)?

Am I missing some configuration? Or can someone point to some java code that uses servlet request object to get attributes from the SP?

Any help appreciated, especially for such a noob question.

-Bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210329/5fc8019f/attachment.htm>