<div dir="ltr">Hello!<div><br></div><div>I'm curious about the behavior of the <font face="courier new, monospace">sessionHook</font> attribute within <font face="courier new, monospace">applicationOverride </font><font face="arial, helvetica, sans-serif">element</font>. It doesn't appear to override "properly" when used within an application override ...</div><div><br></div><div>Our situation: we have three sites all (roughly) using the same SP and IdP. Two of the sites need to invoke a sessionHook as part of a provisioning/account validation process, but one of them should not. Originally, we tried to accomplish this by setting the sessionHook at the <font face="courier new, monospace">applicationDefaults</font><font face="arial, helvetica, sans-serif"> element level and "blanking out" the session hook on a applicationOverride element. Apache uses ShibRequestSetting applicationId xxx to invoke the desired "application" ... but all three sites would use the sessionHook without respect to the override.</font></div><div><font face="arial, helvetica, sans-serif"><br></font></div><div><font face="arial, helvetica, sans-serif">In a different attempt, we removed the sessionHook directive from applicationDefaults and tried to specify it in two different applicationOverrides, leaving it unspecified in the third. This also didn't function as intended ... none of the sites would invoke sessionHook.</font></div><div><br></div><div>I've tried to follow the source code to understand how and in what order the SP builds its config, but I figured a quick message to the list would be a better start.</div><div><br></div><div>We're running SP 2.5.3 in Apache. Any thoughts? Can I provide more/better information?</div><div><br></div><div>Thank you!</div><div><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><b style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px">Jeff Stice-Hall, CISSP, CSSLP, CSM</b><br style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px"><span style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px">Identity/Access Management Specialist</span><br style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px"><span style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px">Lexmark International</span><br style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px"><br style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px"><a href="http://www.lexmark.com" target="_blank"><font face="arial, helvetica, sans-serif"><span style="font-size:12px">w</span></font>ww.lexmark.com</a><br style="color:rgb(0,0,0);font-family:arial,helvetica,sans-serif;font-size:12px"><br></div></div></div>
</div></div>