<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head><body lang="EN-GB" link="#467886" vlink="#96607D" style="word-wrap:break-word"><br>
<br>
<div class="WordSection1">
<p class="MsoNormal">Hi<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have 2 sites I need to secure on 1 server, different use cases for each sp.<br>
<br>
IDP is Azure, server is IIS.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have got this configured so far using Application Overrides, authentication is triggered and appears to be working for both and the first site is totally working as expected.<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">My issue is the new 2<sup>nd</sup> site is completing authentication, but the Header ServerVariables are not making it to the target page.<br>
<br>
I can see the SAML payload and variables using my usual process by checking is the Firefox addin SAML Tracer, this appears correct and what I’d expect to see, but when retrieving the Server Variables on the target page, there is no sign of the Shibboleth
Variables I am used to seeing (have written all variables out for debugging, the standard variables are shown, nothing from Shibboleth)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The relevant sections I have configured are below.<br>
<br>
Can you help me understand where to start with tracking down the ServerVariables please?
<br>
<br>
Best<br>
<br>
Alex<br>
<br>
<ISAPI normalizeRequest = "true" safeHeaderNames = "true"><o:p></o:p></p>
<p class="MsoNormal"> <Site<o:p></o:p></p>
<p class="MsoNormal"> id = "1"<o:p></o:p></p>
<p class="MsoNormal"> name = "uat.XXXXX.XX.uk"<o:p></o:p></p>
<p class="MsoNormal"> scheme = "https"<o:p></o:p></p>
<p class="MsoNormal"> port = "443"<o:p></o:p></p>
<p class="MsoNormal"> useHeaders = "true"<o:p></o:p></p>
<p class="MsoNormal"> useVariables = "false"/><o:p></o:p></p>
<p class="MsoNormal"> <Site<o:p></o:p></p>
<p class="MsoNormal"> id = "5"<o:p></o:p></p>
<p class="MsoNormal"> name = "3pop. XXXXX.XX.uk"<o:p></o:p></p>
<p class="MsoNormal"> scheme = "https"<o:p></o:p></p>
<p class="MsoNormal"> port = "443"<o:p></o:p></p>
<p class="MsoNormal"> useHeaders = "true"<o:p></o:p></p>
<p class="MsoNormal"> useVariables = "false"/><o:p></o:p></p>
<p class="MsoNormal"> </ISAPI><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><RequestMap><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <Host name = "uat. XXXXX.XX.uk"><o:p></o:p></p>
<p class="MsoNormal"> <Path<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:36.0pt"> name = "XXXXX_SSO_Return.asp"<o:p></o:p></p>
<p class="MsoNormal"> authType = "shibboleth"<o:p></o:p></p>
<p class="MsoNormal"> requireSession = "true"/><o:p></o:p></p>
<p class="MsoNormal"> </Host><o:p></o:p></p>
<p class="MsoNormal"> <Host name = "3pop. XXXXX.XX.uk" applicationId="site5"><o:p></o:p></p>
<p class="MsoNormal"> <Path<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:36.0pt"> name = "secure"<o:p></o:p></p>
<p class="MsoNormal"> authType = "shibboleth"<o:p></o:p></p>
<p class="MsoNormal"> requireSession = "true"/><o:p></o:p></p>
<p class="MsoNormal"> </Host><o:p></o:p></p>
<p class="MsoNormal"> </RequestMap><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><ApplicationOverride id="site1" entityID=<a href="https://uat.XXXXXX.XX.uk/shibboleth">https://uat.XXXXXX.XX.uk/shibboleth</a>><o:p></o:p></p>
<p class="MsoNormal"> <MetadataProvider<o:p></o:p></p>
<p class="MsoNormal"> type = "XML"<o:p></o:p></p>
<p class="MsoNormal"> validate = "true"<o:p></o:p></p>
<p class="MsoNormal"> url = <a href="https://login.microsoftonline.com/.....2f">
https://login.microsoftonline.com/.................2f</a><o:p></o:p></p>
<p class="MsoNormal"> backingFilePath=" Azure_uat.xml"
<o:p></o:p></p>
<p class="MsoNormal"> maxRefreshDelay = "900"><o:p></o:p></p>
<p class="MsoNormal"> </MetadataProvider><o:p></o:p></p>
<p class="MsoNormal"> </ApplicationOverride><o:p></o:p></p>
<p class="MsoNormal"> <ApplicationOverride id="site5" entityID=<a href="https://3pop.XXXXXX.XX.uk/shibboleth">https://3pop.XXXXXX.XX.uk/shibboleth</a> REMOTE_USER = "eppn subject-id pairwise-id persistent-id"><o:p></o:p></p>
<p class="MsoNormal"> <MetadataProvider<o:p></o:p></p>
<p class="MsoNormal"> type = "XML"<o:p></o:p></p>
<p class="MsoNormal"> validate = "true"<o:p></o:p></p>
<p class="MsoNormal"> url = <a href="https://login.microsoftonline.com/..................4a">
https://login.microsoftonline.com/..................4a</a><o:p></o:p></p>
<p class="MsoNormal"> backingFilePath="Azure_3Pop.xml"
<o:p></o:p></p>
<p class="MsoNormal"> maxRefreshDelay = "900"><o:p></o:p></p>
<p class="MsoNormal"> </MetadataProvider><o:p></o:p></p>
<p class="MsoNormal"> </ApplicationOverride><o:p></o:p></p>
</div>
<br>
<br>
<font size="2px" face="Verdana">
<font color="#000000"><b>Alex Webber</b></font><b> | <font color="#000000"><b></b></font><br>
<font color="#000000"><b>Director of Information Technology</b></font>
<br>
<br>
<table border="0" cellspacing="0" cellpadding="0"><tr><td><IMG border="0" alt="Inntel Logo" src="cid:124082912311601073@uk-mta-208.uk.mimecast.lan" ></td></tr></table> <br>
<font color="000000"><b>Inntel | Accommodation. Meetings. Travel. Solved.</b></font><br>
<font color="000000"><b>T | </b></font> <font color="000000">0344 847 5500</font> <font color="000000"><b>E | </b></font> <font color="000000"><a href="mailto:aw@inntel.co.uk">aw@inntel.co.uk</a>
<font color="000000"><b>W | </b></font> <font color="000000"><a href="http://www.inntel.co.uk" target="_blank">inntel.co.uk</a></font><br><br>
</font>
</b></font></body></html>