<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 13, 2017 at 4:02 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div id="gmail-:of" class="gmail-a3s gmail-aXjCH gmail-m15ca343e31d3b6d6">Except you injected HttpServletResponse.<br>
<br></div></blockquote></div><br>Well, that's embarrassing.</div><div class="gmail_extra"><br></div><div class="gmail_extra">New but related issue.</div><div class="gmail_extra"><br></div><div class="gmail_extra">I'm trying to access attributes being set by our SSO.  Right now, the SSO's apache module is only set to protect some select URLs under "/idp/Authn", so when the attribute resolver tries to get access them, they're set to null.</div><div class="gmail_extra"><br></div><div class="gmail_extra">If I protect the entire IDP, I see the variables and their values, but doing this for real would really screw with the operation of the IDP.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ideas?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div><div class="gmail_extra"><br></div></div>