<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
We have an application and it is protected using siteminder with shibboleth. Our public surveys are prompting for authentication.<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
In my shibboleth.xml file I have this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<RequestMapper type="Native">
<div> <RequestMap></div>
<div> <!--</div>
<div> The example requires a session for documents in /secure on the containing host with http and</div>
<div> https on the default ports. Note that the name and port in the <Host> elements MUST match</div>
<div> Apache's ServerName and Port directives or the IIS Site name in the <ISAPI> element above.</div>
<div> --></div>
<div> <Host name="rXXXXXXX.niddk.nih.gov" authType="shibboleth" requireSession="true"></div>
<div> <Path name="secure" authType="shibboleth" requireSession="true"/></div>
<div><PathRegex regex="\(api|api/|api/index.php|api/help/|api/help/index.php\)$" unset="authType requireSession"/></div>
<div><PathRegex regex="Surveys/" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/Resources/" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/SendIt/download\.php.*" unset="authType requireSession"/></div>
<div><PathRegex regex="redcap_v[\.\d]*/\(Design/get_fieldlabel|DataEntry/empty\)\.php$" unset="authType requireSession"/></div>
<div><PathRegex regex="plugins/open/.*" unset="authType requireSession"/></div>
<div><PathRegex regex="\(temp|edocs|webtools2\)/.*"></div>
<div> <AccessControl></div>
<div> <Rule require="affiliation"> BLOCK_ALL_yKWeMcXtZYUWumd+zAjKc=</Rule> </div>
<div> </AccessControl></div>
<div></PathRegex></div>
<div><PathRegex regex="plugins/esignature/secure/.*" forceAuthn="true"/></div>
<br>
</div>
</body>
</html>