<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hi,
</span><br><span>I am new to Shibboleth and SAML in general.</span><br><span>I have the Shibboleth SP agent configured for an IIS7 web app and I have a SAML Tracer
plugin showing that the SAML response getting posted from IdP to SP (see
below). I have a ASP .NET application and all I am trying to do is read
the SAMLResponse or look at the attributes pushed to me by IdP. I have
the attribute-map.xml configured correctly to map the attributes
</span><br><span>All the ASP .NET page is doing is dumping the Headers
and this is all I see as below. How do I read the attributes from my ASP .NET page? I see
the attributes sent over from SP to IdP when I use https://../<span class="bold highlight search-highlight">Shibboleth</span>.sso/Session
</span>URL<br><span>Are the headers appendd to the encrypted session cookie?</span> Or I need some IIS 7 config change to enable seeing the attrs as headers?<br><br style="font-weight: bold;"><span style="font-weight: bold;">HTTP Headers retrieved
</span><br style="font-weight: bold;"><br><br><span>Connection: keep-alive Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Accept-Encoding: gzip,
deflate Accept-Language: en-us,en;q=0.5 Cookie:
_shibsession_64656661756c7468747470733a2f2f6c61626974303277696e3230303872322e626f632e61642e63656e7375732e111116f6c657468=_12d45c41fade37e34f3bf56531ccfff5;
ASPSESSIONIDSETDRSSA=BGJNCC11DIE Host: mySP.test.org <span class="bold highlight search-highlight">User</span>-Agent:
Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
ShibSpoofCheck: 630984012180204917122709628663327597330
</span><br><span>HTTP_CONNECTION:keep-alive
</span><br><span>HTTP_ACCEPT:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
</span><br><span>HTTP_ACCEPT_CHARSET:ISO-8859-1,utf-8;q=0.7,*;q=0.7
</span><br><span>HTTP_ACCEPT_ENCODING:gzip, deflate
</span><br><span>HTTP_ACCEPT_LANGUAGE:en-us,en;q=0.5
</span><br><span>HTTP_COOKIE:_shibsession_64656661756c7468741111111111111111141fade37e34f3bf56531ccfff5; ASPSESSIONIDSETDRSSA=BGJNCCOAAdNKIKODIE
</span><br><span>HTTP_HOST:mySP.test.org
</span><br><span>HTTP_USER_AGENT:Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
</span><br><span>HTTP_SHIBSPOOFCHECK:63098401218020491712211111163327597330
</span><br><br><br><span style="font-weight: bold;">The SAML Trace
</span><br><br><span>POST </span><a href="https://mysp.test.org/Shibboleth.sso/SAML2/POST" target="_top" rel="nofollow"><span>https://mySP.test.org/<span class="bold highlight search-highlight">Shibboleth</span>.sso/SAML2/POST</span></a><span> HTTP/1.1
</span><br><span>Host: mySP.test.org
</span><br><span><span class="bold highlight search-highlight">User</span>-Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
</span><br><span>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
</span><br><span>Accept-Language: en-us,en;q=0.5
</span><br><span>Accept-Encoding: gzip, deflate
</span><br><span>Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
</span><br><span>Connection: keep-alive
</span><br><span>Referer: </span><a href="https://myidp.test.org:8443/nidp/saml2/sso?SAMLRequest=BCrgRqpWqu31tuqzCNhtVRX%2BealnYeC0kBOg%2BWxMyU5gc3GF67b8u3o0%2F0fR4Cr56XqGL8DnFD27d6TVstCdbD68vOv0cWEEtyJDIcLz88jfjzP%2FBA%3D%3D&RelayState=ss%3Amem%3A24015e300d441c49064db74d4715de54" target="_top" rel="nofollow"><span>https://myIDP.test.org:8443/nidp/saml2/sso?SAMLRequest=BCrgRqpWqu31tuqzCNhtVRX%2BealnYeC0kBOg%2BWxMyU5gc3GF67b8u3o0%2F0fR4Cr56XqGL8DnFD27d6TVstCdbD68vOv0cWEEtyJDIcLz88jfjzP%2FBA%3D%3D&RelayState=ss%3Amem%3A24015e300d441c49064db74d4715de54</span></a><br><span>Cookie:
_shibsession_111111c7468747470733a2f2f6c61626974303277696e3230303872322e626f632e61642e63656e7375732e676f711111111168=_c1ad885514cf14a54e11;
ASPSESSIONIDSETDRSSA=BGJNCCOAALDAN11IKODIE
</span><br><span>Content-Type: application/x-www-form-urlencoded
</span><br><span>Content-Length: 8216
</span><br><br><span>HTTP/?.? 302 Moved
</span><br><span>Cache-Control: private,no-store,no-cache
</span><br><span>Content-Length: 40
</span><br><span>Content-Type: text/html
</span><br><span>Expires: 01-Jan-1997 12:00:00 GMT
</span><br><span>Location: </span><a href="https://mysp.test.org/vlabsample/Consume.aspx" target="_top" rel="nofollow"><span>https://mySP.test.org/vlabsample/Consume.aspx</span></a><br><span>Server: Microsoft-IIS/7.5
</span><br><span>Set-Cookie:
_shibsession_64656661756c74687111111111111303277696e3230303872322e626f632e61642e63656e7375732e676f762f73702f736869621111168=_12d45c41fade37e34f3bf56531ccfff5;
path=/
</span><br><span>X-Powered-By: ASP.NET
</span><br><span>Date: Thu, 27 Oct 2011 21:00:38 GMT
</span><br><br><span style="font-weight: bold;">The Session Info
</span><br><br><span>Miscellaneous
</span><br><span>Client Address: 10.10.25.aaaa
</span><br><span>Identity Provider: </span><a href="https://myidp.test.org:8443/nidp/saml2/metadata" target="_top" rel="nofollow"><span>https://myIDP.test.org:8443/nidp/saml2/metadata</span></a><br><span>SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
</span><br><span>Authentication Time: 2011-10-27T20:57:14Z
</span><br><span>Authentication Context Class: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
</span><br><span>Authentication Context Decl: secure/name/password/uri
</span><br><span>Session Expiration (barring inactivity): 464 minute(s)
</span><br><br><span>Attributes
</span><br><span>cn- John Doe
</span><br><span>sn: Doe
</span><br><span>givenName: John
</span><br><span>persistent-id: </span><a href="https://myidp.test.org:8443/nidp/saml2/metadata%21https://mySP.test.org/sp/shibboleth%21S+H/+RVa1FJgYsssshGAWg7tg==" target="_top" rel="nofollow"><span>https://myIDP.test.org:8443/nidp/saml2/metadata!https://mySP.test.org/sp/<span class="bold highlight search-highlight">shibboleth</span>!S+H/+RVa1FJgYsssshGAWg7tg==</span></a></div></div></body></html>