<div dir="ltr">Thanks for the reply. Setting requireSession to false in RequestMap doesn&#39;t change the behavior. The shibauthorizer still redirects sessions to IdP and I see Shib attributes once the session is established. Note that I&#39;m using Lighttpd which doesn&#39;t have a native Shib module so I&#39;m using the shibresponder/shibauthorizer fastcgi. <div><br></div><div>My requestmap and lighttpd configs look like this (my php protected content is under /secure path). Is there anything else to check?</div><div><br></div><div><div>RequestMapper type=&quot;Native&quot;&gt;</div><div>  &lt;RequestMap&gt;</div><div>      &lt;Host name=&quot;<a href="http://sp.example.org">sp.example.org</a>&quot;&gt;</div><div>          &lt;Path name=&quot;secure&quot; authType=&quot;shibboleth&quot; requireSession=&quot;false&quot;/&gt;</div><div>      &lt;/Host&gt;</div><div>   &lt;/RequestMap&gt;</div><div>&lt;/RequestMapper&gt;</div><div><br></div><div><br></div><div>fastcgi.server  = (</div><div>      &quot;/Shibboleth.sso&quot; =&gt; ((&quot;socket&quot; =&gt; &quot;/tmp/fcgi-resp.sock&quot;, &quot;bin-path&quot; =&gt; &quot;/servers/sapo-sp/lib/shibboleth/shibresponder&quot;, &quot;check-local&quot; =&gt; &quot;disable&quot;, &quot;mode&quot; =&gt; &quot;responder&quot;)),</div><div>      &quot;/secure&quot;   =&gt; ((&quot;socket&quot; =&gt; &quot;/tmp/fcgi-auth.sock&quot;, &quot;bin-path&quot; =&gt; &quot;/servers/sapo-sp/lib/shibboleth/shibauthorizer&quot;, &quot;check-local&quot; =&gt; &quot;disable&quot;, &quot;mode&quot; =&gt; &quot;authorizer&quot;)),</div><div>      &quot;.php&quot; =&gt; (( &quot;socket&quot; =&gt; &quot;/tmp/fgci-php.sock&quot;, &quot;broken-scriptfilename&quot; =&gt; &quot;enable&quot;, &quot;mode&quot; =&gt; &quot;responder&quot;))</div><div>)</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 11, 2015 at 9:39 AM, Cantor, Scott <span dir="ltr">&lt;<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 2/11/15, 1:10 PM, &quot;Guy Tadi&quot; &lt;<a href="mailto:tadiguy812@gmail.com">tadiguy812@gmail.com</a>&gt; wrote:<br>
<br>
<br>
<br>
&gt;I&#39;m trying to do lazy session with Lighttpd and let my application manage<br>
&gt;the session (I already have non-lazy session working with<br>
&gt;shibauthorizer/shibresponder).<br>
<br>
</span>There&#39;s no difference, just change the RequestMap settings so that<br>
requireSession is false.<br>
<span class=""><br>
&gt;If my application redirects session to<br>
&gt;<a href="https://sp.example.com/Shibboleth.sso/Login?target=https://sp.example.com/" target="_blank">https://sp.example.com/Shibboleth.sso/Login?target=https://sp.example.com/</a><br>
&gt;App<br>
</span>&gt;&lt;<a href="https://sp.example.com/Shibboleth.soo/Login?target=https://sp.example.com" target="_blank">https://sp.example.com/Shibboleth.soo/Login?target=https://sp.example.com</a><br>
&gt;/App&gt; how<br>
<span class="">&gt; can my application get access to the attributes after Shib has processed<br>
&gt;the AuthN response?<br>
<br>
</span>The same way it would otherwise.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>