<div dir="ltr"><div>I'm still unclear about this. If I change my RequestMapper to </div><div><Path authType="shibboleth" /> I get a configuration error.</div><div> </div><div>I thought requireSession="true" is needed to trigger SP and get assertion from IdP. If I use</div><div><Path name="secure" authType="shibboleth" /></div><div>or</div><div><Path name="secure" authType="shibboleth" exportAssertion="true" /></div><div>or</div><div><Path name="secure" authType="shibboleth" requireSession="false" exportAssertion="true" /></div><div> </div><div>the SP never redirects the session to the IdP and so I can access /secure without any Shib session attributes. </div><div> </div><div>Using my current configuration below can you please clarify a bit which values to use for each attribute and which ones, if any, I should remove completely? </div><div> </div><div><Path name="secure" authType="shibboleth" requireSession="true" exportAssertion="true" /></div><div> </div><div> Thanks for the help. </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 17, 2015 at 3:54 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>> This is what I have in the RequestMapper:<br>
<br>
</span>I know that, and I told you what to add to address the rest of the content. Set authType alone. That should be sufficient.<br>
<span><br>
> If I access <a href="https://hostname/documentroot/secure" target="_blank">https://hostname/documentroot/secure</a> I do see all the shib<br>
> attributes. However, the application that needs to consume the attributes is<br>
> in <a href="https://hostname/documentroot" target="_blank">https://hostname/documentroot</a> but due to other constraints I can't<br>
> require session for /documentroot.<br>
<br>
</span>And I know that also, and as I told you, you don't have to. Just set authType.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>