<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I ended up doing this, I suppose it is not very elegant, but it worked.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<Path name="surveys/" authType="shibboleth" requireSession="false"/>
<div><Path name="api/" authType="shibboleth" requireSession="false"/></div>
<Path name="rxxxx_v12.0.19/Resources" authType="shibboleth" requireSession="false"/></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I have zero regex skills, so I will have to see if I can find a way to do this with regex.<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Matthews, Lee (NIH/NIDDK) [E] via users <users@shibboleth.net><br>
<b>Sent:</b> Thursday, April 28, 2022 12:28 PM<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Cc:</b> Matthews, Lee (NIH/NIDDK) [E] <lee.matthews@nih.gov><br>
<b>Subject:</b> [EXTERNAL] exclude a path from protection</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<p></p>
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:Calibri; color:Black; text-align:left">
<span style="color:#9C6500">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and are confident the content is safe.</div>
<br>
<p></p>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
We have an application and it is protected using siteminder with shibboleth. Our public surveys are prompting for authentication.<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
In my shibboleth.xml file I have this:</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<RequestMapper type="Native">
<div> <RequestMap></div>
<div> <!--</div>
<div> The example requires a session for documents in /secure on the containing host with http and</div>
<div> https on the default ports. Note that the name and port in the <Host> elements MUST match</div>
<div> Apache's ServerName and Port directives or the IIS Site name in the <ISAPI> element above.</div>
<div> --></div>
<div> <Host name="rXXXXXXX.niddk.nih.gov" authType="shibboleth" requireSession="true"></div>
<div> <Path name="secure" authType="shibboleth" requireSession="true"/></div>
<div><PathRegex regex="\(api|api/|api/index.php|api/help/|api/help/index.php\)$" unset="authType requireSession"/></div>
<div><PathRegex regex="Surveys/" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/Resources/" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/SendIt/download\.php.*" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/\(Design/get_fieldlabel|DataEntry/empty\)\.php$" unset="authType requireSession"/></div>
<div><PathRegex regex="plugins/open/.*" unset="authType requireSession"/></div>
<div><PathRegex regex="\(temp|edocs|webtools2\)/.*"></div>
<div> <AccessControl></div>
<div> <Rule require="affiliation"> BLOCK_ALL_yKWeMcXtZYUWumd+zAjKc=</Rule> </div>
<div> </AccessControl></div>
<div></PathRegex></div>
<div><PathRegex regex="plugins/esignature/secure/.*" forceAuthn="true"/></div>
<br>
</div>
</div>
</div>
</body>
</html>