<div dir="ltr">Thanks. That was helpful. I had tried that earlier and it didn't work, but after your response above I decided to try it again. Of course it still didn't work, but then it struck me there might be something else wrong and indeed it was my webserver config. All is well now. Thanks a million.</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 17, 2015 at 4:58 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>> I'm still unclear about this. If I change my RequestMapper to<br>
> <Path authType="shibboleth" /> I get a configuration error.<br>
<br>
</span>I didn't say to do that, and that isn't valid, Paths require names. If you want to attach settings to a Host, you put it in the Host element.<br>
<span><br>
> I thought requireSession="true" is needed to trigger SP and get assertion<br>
> from IdP.<br>
<br>
</span>If you want to trigger a session for /secure, then do that. You asked how to get the data visible for other content, and the answer is to attach the authType setting to *that* content. With or without requireSession being set, any existing session will be processed and exported for that request.<br>
<span><br>
> Using my current configuration below can you please clarify a bit which<br>
> values to use for each attribute and which ones, if any, I should remove<br>
> completely?<br>
<br>
</span>Add authType to the Host. If that doesn't work, then I'm not remembering the code well enough and would have to go do some checking.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>