<div dir="ltr">I have the following config in my in-premises IDP:<br><br>     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://CLOUD-HOST/SHIRE/SAML2/POST">https://CLOUD-HOST/SHIRE/SAML2/POST</a>" index="1"/><br>     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="<a href="https://CLOUD-HOST/SHIRE/SAML/POST">https://CLOUD-HOST/SHIRE/SAML/POST</a>" index="2"/><br>  </SPSSODescriptor><br><br><br>The shidb process shows that it received attributes:<br><br><br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION : Cached the following attributes with session (ID: _05f537c8e870fc1e22d309e2ff91be03) for (applicationId: my_shib) {<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION :      mail (1 values)<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION :      eduPersonPrincipalName (1 values)<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION :      sn (1 values)<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION :      givenName (1 values)<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION :      eduPersonEntitlement (1 values)<br>20:31:29.236(05/19) INFO  Shibboleth-TRANSACTION : }<br>20:31:29.236(05/19) DEBUG Shibboleth.SSO.SAML2 : ACS returning via redirect to: <a href="https://CLOUDHOST/api-to-deliver-attributes">https://CLOUDHOST/api-to-deliver-attributes</a><br><br>but at "api-to-deliver-attributes", all the headers are NULL.<br></div>