How can I keep SAML assertion in SP?

[Paolo Mosconi]

I configured memcache storage and I can see that SAML assertion is stored.
I am still not receiving any assertion count header.

The sessions config is the following:
        <Sessions lifetime="28800" timeout="3600" relayState="ss:mc"
                  checkAddress="false" handlerSSL="true" cookieProps="https"
                  exportLocation="https://127.0.0.1/Shibboleth.sso/GetAssertion" exportACL="127.0.0.1">

I tried a few different values for exportLocation (docs are extremely high level) but I had no success.

> Whatever your goal is, rethink it. Anything you're doing with that assertion is likely either unnecessary or flat wrong.
A 3rd party external service needs the assertion to create a one time signing certificate for authenticated users: theirs specs, nothing I can do about.

Thanks

Paolo Mosconi
paolo.mosconi at actvalue.com

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott via users
Sent: venerdì 27 gennaio 2023 21:14
To: Shib Users <users at shibboleth.net>
Cc: Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: How can I keep SAML assertion in SP?

> I tried to add the relevant configuration but I’m always receiving an 
> empty HTTP_SHIB_ASSERTION_COUNT header.

Then your SP is not protecting that resource.

> In addition, I didn’t understand how to retrieve the assertion:

Your application code issues a request to the URL it tells you to use.

Whatever your goal is, rethink it. Anything you're doing with that assertion is likely either unnecessary or flat wrong.

-- Scott


--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net