Enabling Shibboleth Attribute checker handler throws returns 404

[Kannan, Satheesh (ELS-CON)]

Hi Peter,

Thanks for your suggestion.

We already configured the second step in Handler XML element with Location on Sessions element and apparently still throws 404.

<Sessions>
<Handler type="AttributeChecker" Location="/AttrChecker" template="attrChecker.html" attributes="eppn displayName" flushSession="true"/>
</Sessions>

Also, This page https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2063695997/ApplicationDefaults  says Session Hook would be relative path  and changing sessionHook="/Shibboleth.sso/attrChecker.html" seems to be throwing different error as "we couldn't give you access via Institution". Do you have any idea Session Hook Value should be "/Shibboleth.sso/AttrChecker"?

We have few questions around this Attribute checker handler and listed below the Questions.

Is this possible to display attrChecker.html in case of successful login with IDP  to confirm and see  the attributes received successfully in user interface?
Is there a way we can configure attribute checker for one specific IDP?

Thanks,
Satheesh Kannan



-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Tuesday, October 19, 2021 6:07 PM
To: users at shibboleth.net
Subject: Re: Enabling Shibboleth Attribute checker handler throws returns 404

*** External email: use caution ***



* Kumar, Prasanth (ELS-LON) <p.kumar.13 at elsevier.com> [2021-10-19 13:28]:
> The  error message seeing in the browser "The requested URL 
> /Shibboleth.sso/AttrChecker was not found on this server".

Sounds to me you only performed the first step (adding the 'sessionHook' XML attribute to your ApplicationDefaults element) but not the second (adding Handler XML element of type="AttributeChecker"
with the chosen Location="/AttrChecker").
-peter
--
For Consortium Member technical support, see https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=04%7C01%7Cs.kannan.1%40elsevier.com%7C566a124065fc4223936b08d992fd228e%7C9274ee3f94254109a27f9fb15c10675d%7C0%7C0%7C637702438212897524%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=%2FXk6uoqSkl5icOiapRsX6Ei6Yd%2FgOCeDj89H5fSXyIM%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net