How can I keep SAML assertion in SP?

[Paolo Mosconi]

Thanks for your help.
I tried to add the relevant configuration but I'm always receiving an empty HTTP_SHIB_ASSERTION_COUNT header. Could you please provide a sample for Sessions and SessionCache keys?
In addition, I didn't understand how to retrieve the assertion: if count is specific for the user and the allowed IP should be localhost, how can the GET on the location can be authorized?

Paolo Mosconi

[ACTVALUE_LOGO firma email]
paolo.mosconi at actvalue.com<mailto:paolo.mosconi at actvalue.com>

From: users <users-bounces at shibboleth.net> On Behalf Of Murphy, Kellen J. (wfx6yz) via users
Sent: venerdì 27 gennaio 2023 18:22
To: Shib Users <users at shibboleth.net>
Cc: Murphy, Kellen J. (wfx6yz) <wfx6yz at virginia.edu>
Subject: RE: How can I keep SAML assertion in SP?

You can export assertions. See: https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335032/AssertionExport

Kellen Murphy
Identity Architecture & Solutions Engineer
E wfx6yz at virginia.edu<mailto:wfx6yz at virginia.edu>
University of Virginia
Information Technology Services (ITS)
Michie South
Emmet Street
P.O. Box 400217
Charlottesville, VA 22901
its.virginia.edu<https://its.virginia.edu/>
[University of Virginia]<https://brand.virginia.edu/>



From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> On Behalf Of Paolo Mosconi
Sent: Friday, January 27, 2023 12:10 PM
To: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: How can I keep SAML assertion in SP?

Hi,
I have an Apache + Shibboleth SP configuration and decoded attributes are added to the response headers after successful authentication (ShibUseHeaders On). I have been asked to store also the SAML assertion received from the IdP for later use by additional services. How can this be accomplished?
Thanks

Paolo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230127/7115785e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 6652 bytes
Desc: image002.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230127/7115785e/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 21661 bytes
Desc: image003.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230127/7115785e/attachment-0001.png>