Shibboleth Developers

["Scott Cantor" <>]

> Very cool!  Is this documented somewhere?

Probably not. It was mainly implemented for the SAML interop because
Shibboleth normally uses a relatively worthless identifier.

> Mysteriously, if I say that the header is called "Shib-XXX" instead, I 
> get a header called HTTP_SHIB_XXX but the one called 
> HTTP_SHIB_NAMEIDENTIFIER_FORMAT is still called that.  Not sure whether 
> this is what I'd expect or not.

The format is pushed into a "fixed" header, more or less like the identity
provider name. It just isn't always exported, only if the name itself is
exported.

-- Scott