Shibboleth attributes
In some cases the IdP authenticates the user but required attributes are not transfered. In particular, if eduPersonTargetetId
is missing, the authentication is performed silently, but since REMOTE_USER
isn't set, our middleware has no knowledge of any authentication process.
In this and other cases, we should throw some kind of error and redirect a page with some explanation.
Edited by Stefan Beck