Not getting any headers
By default you should be able to see these headers as they ar released as default in shib SP:
- Shib-Identity-Provider
- Shib-Authentication-Method
- Shib-Application-ID
If you can see the above attributes but you can't see any others, most probable reasons:
- your AAP filtering the attributes, see shibd.log or your transaction.log
- the attribute is rejected (i.e. AAP expects scoped attribute, but being provided non-scoped one)
- assertion condition is invalid
If you don't see any attributes at all, then your application is
not protected by shibboleth SP. Check
your protection configuration on appropriate vhost in your apache or whether you've jk-mounted the apps properly
In some condition, mod_proxy can cause the above situation where tomcat keeps creating new session for every visit
to the application. You need to identify if that's the case, and configure your mod_proxy accordingly
to top