Duplicate Attribute Values after Shibboleth Upgrade

Cantor, Scott cantor.2 at osu.edu
Mon Sep 13 17:27:57 UTC 2021

This is an IIS bug that I have explained many times. The security fix to the SP exposed an IIS bug in the default document module. It does not affect normal access, Microsoft did not implement their subrequest logic safely and it contaminates requests. If you don't like it and aren't willing to report it, then you can set the de-duplication option in the SP to trim them out except for a few edge cases.

-- Scott

More information about the users mailing list