Server variables empty on IIS

[FONTVIELLE Thibault]

Hi everybody,

I'm trying to configure Shibboleth in a Microsoft environment. IdP is ADFS and the web server is IIS.

For a few days, I've tried a lot of combinations to get server variables populated, to no avail.

I'm sending SamAccountName as Name on ADFS, and then mapped the attribute like this in attribute-map.xml :

            <Attribute name=http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name<https://urldefense.com/v3/__http:/schemas.xmlsoap.org/ws/2005/05/identity/claims/name__;!!BnkV9pdh5V0!DG7kbYcMSWLhgQ7Hz3iFmpWJVI-snkcOWSYeJgMflBLkv3UCLMdn6DfWRrjJvql5u7n67S4kcHUhKFnZwEFaRzVkFmKOiwBlJMTRjgMB9A$> id="name">
                        <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
            </Attribute>

Variable "name" is showing correctly when accessing the Session endpoint, but when trying to get this through code, no variable seems to be populated. Also tried accessing the built-in shibboleth variables like "Shib-Application-ID", all of them are empty.
When using the provided IIS aspx page in a newly created site, "name" and "REMOTE_USER" are unset.

In shibboleth2.xml :

ISAPI use default for useVariables and useHeaders as I've not declared anything (tried with setting both explicitly but got the same result) :
<ISAPI normalizeRequest="true" safeHeaderNames="true" >

I tried to set "REMOTE_USER" in ApplicationDefaults to the "name" variable that I get from IDP, but "REMOTE_USER" is never set (checked this in IIS logs, by adding the REMOTE_USER server variable in the logs) :
REMOTE_USER="name eppn subject-id pairwise-id persistent-id"

I'm using the iis7_shib.dll. Shibboleth version is the latest, 3.4.1.5.

What bugs me the most is that everything looks OK in the Session endpoint, IIS just seems to ignore it.

Do you have any idea on this?

Kind regards,
Thibault


INTERNE

Ce message est confidentiel. Son contenu ne represente en aucun cas un 
engagement de la part de la Mutuelle Saint-Christophe assurances sous reserve de 
tout accord conclu par ecrit entre vous et la Mutuelle Saint-Christophe assurances.
Toute publication, utilisation ou diffusion, meme partielle, doit etre 
autorisee prealablement. Si vous n'etes pas destinataire de ce message, 
merci d'en avertir immediatement l'expediteur. 

This message is confidential. Its contents do not constitute a 
commitment by Mutuelle Saint-Christophe assurances except where provided for in 
a written agreement between you and Mutuelle Saint-Christophe assurances. Any 
unauthorised disclosure, use or dissemination, either whole or partial, is 
prohibited. If you are not the intended recipient of the message, please 
notify the sender immediately.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240924/267ac9aa/attachment.htm>