<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Excellent. Thanks for the clarification!</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, May 29, 2013 10:38 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Multiple copies of an attribute?<br> </font> </div> <div class="y_msg_container"><br>On 5/29/13 1:35 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com"
href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>So, just as an example, let's say I get role from an Idp and it is passed<br>>to my protected resource in the request headers as HTTP_ROLE. Now, if<br>>the IDp releases 2 copies of this will I then see 2 instances of<br>>HTTP_ROLE passed to my protected resource?<br><br>No, you'll see HTTP_ROLE=role1;role2<br><br>Same as now.<br><br>It is formally speaking not strictly legal CGI to have duplicate headers,<br>but this is an area of dispute, Microsoft being one of the worst offenders<br>regarding how they deal with it.<br><br>The SP never, ever creates two copies of the same header itself.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div>
</div></body></html>