2 Applications, 1 Server, variables not availabe

[Alex Webber]

Hi

I have 2 sites I need to secure on 1 server,  different use cases for each sp.

IDP is Azure,  server is IIS.

I have got this configured so far using Application Overrides, authentication is triggered and appears to be working for both and the first site is totally working as expected.

My issue is the new 2nd site is completing authentication,  but the Header ServerVariables are not making it to the target page.

I can see the SAML payload and variables using my usual process by checking is the Firefox addin SAML Tracer,  this appears correct and what I’d expect to see,  but when retrieving the Server Variables on the target page,  there is no sign of the Shibboleth Variables I am used to seeing (have written all variables out for debugging,  the standard variables are shown,  nothing from Shibboleth)

The relevant sections I have configured are below.

Can you help me understand where to start with tracking down the ServerVariables please?

Best

Alex

<ISAPI normalizeRequest = "true" safeHeaderNames = "true">
            <Site
                id = "1"
                name = "uat.XXXXX.XX.uk"
                scheme = "https"
                port = "443"
                useHeaders = "true"
                useVariables = "false"/>
                    <Site
                id = "5"
                name = "3pop. XXXXX.XX.uk"
                scheme = "https"
                port = "443"
                useHeaders = "true"
                useVariables = "false"/>
        </ISAPI>


<RequestMap>

            <Host name = "uat. XXXXX.XX.uk">
               <Path
   name = "XXXXX_SSO_Return.asp"
                    authType = "shibboleth"
                    requireSession = "true"/>
            </Host>
                    <Host name = "3pop. XXXXX.XX.uk"  applicationId="site5">
               <Path
    name = "secure"
                    authType = "shibboleth"
                    requireSession = "true"/>
            </Host>
        </RequestMap>



<ApplicationOverride id="site1" entityID=https://uat.XXXXXX.XX.uk/shibboleth>
                                <MetadataProvider
                                type = "XML"
                                        validate = "true"
                                url = https://login.microsoftonline.com/.................2f<https://login.microsoftonline.com/.....2f>
                                                backingFilePath=" Azure_uat.xml"
                            maxRefreshDelay = "900">
                </MetadataProvider>
                </ApplicationOverride>
                <ApplicationOverride id="site5" entityID=https://3pop.XXXXXX.XX.uk/shibboleth REMOTE_USER = "eppn subject-id pairwise-id persistent-id">
                                <MetadataProvider
                                type = "XML"
                                        validate = "true"
                                url = https://login.microsoftonline.com/..................4a
                                                backingFilePath="Azure_3Pop.xml"
                            maxRefreshDelay = "900">
                                </MetadataProvider>
                </ApplicationOverride>

Alex Webber
Director of Information Technology
Inntel - The Meetings and Travel Management Company

Tel: 0344 847 5500
Email: aw at Inntel.co.uk

Please consider the environment before printing this e-mail

View the Inntel eMail disclaimer - http://www.inntel.co.uk/emaildisclaimer.htm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240829/86af9901/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0.png
Type: image/png
Size: 22110 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240829/86af9901/attachment.png>