[Ext] Help setting up a Java app protected by a Shib SP?

[Bryan Wooten]

Oh to add this what we seen when we simply dumber all the request.getHeaders() from the servlet:

host ; idm.utah.edu:8443 user-agent ; Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Firefox/78.0 accept ; text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 accept-language ; en-US,en;q=0.5 accept-encoding ; gzip, deflate, br cookie ; JSESSIONID=058CFFF504E601162EBE9BD6F889ED3A; _shibsession_64656661756c7468747470733a2f2f636173366465762d322e69646d2e757461682e656475=_65a41beb2761d7dca8ef723eea38544d upgrade-insecure-requests ; 1 shib-cookie-name ; shib-session-id ; _65a41beb2761d7dca8ef723eea38544d shib-session-index ; _00fa533ec73d618035a2560bf9e590e8 shib-session-expires ; 1617062425 shib-session-inactivity ; 1617037242 shib-identity-provider ; https://idp.idm.utah.edu/idp/shibboleth shib-authentication-method ; urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport shib-authentication-instant ; 2021-03-29T16:00:40.159Z shib-authncontext-class ; urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport shib-authncontext-decl ; shib-assertion-count ; shib-handler ; https://idpidm.utah.edu/Shibboleth.sso subject-id ; pairwise-id ; eppn ; affiliation ; entitlement ; persistent-id ; shib-application-id ; default remote_user ; x-forwarded-for ; 155.101.242.241 x-forwarded-host ; idm.utah.edu x-forwarded-server ; idm.utah.edu connection ; Keep-Alive Hello Bryan


From: users <users-bounces at shibboleth.net> on behalf of Bryan Wooten <bryan.wooten at utah.edu>
Reply-To: "users at shibboleth.net" <users at shibboleth.net>
Date: Monday, March 29, 2021 at 10:37 AM
To: "users at shibboleth.net" <users at shibboleth.net>
Subject: [Ext] Help setting up a Java app protected by a Shib SP?

WARNING: Stop. Think. Read. This is an external email.
Here is my configuration:

Server A – Docker Shib SP
Server B – Simple Java Servlet running on Tomcat

Server A reverse proxies to the Java url on Server B.

Hitting the Java servlet URL I get re-directed to our IDP and login works.

But for the life of me I can’t seem to be able to find the Attributes being released by the IDP to the SP/app.

I thought they would be simple http headers, but that is wrong. So doing some reading I need to configure both the SP and Tomcat it use AJP? Also there was a thread about tomcat request.getAttributeNames() being broken. So maybe we need to do request.getAttribute(“someName”)?

Am I missing some configuration? Or can someone point to some java code that uses servlet request object to get attributes from the SP?

Any help appreciated, especially for such a noob question.

-Bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210329/f3ee51ab/attachment.htm>