-all SHIB headers- (HTTP_SHIB_ATTRIBUTES is not shown in this list) <% For Each strKey In Request.ServerVariables %> <% if InStr(1, strKey, "SHIB", 1) and not strKey="HTTP_SHIB_ATTRIBUTES" then %> <% end if %> <% Next %>
<%= strKey %> <%= Request.ServerVariables(strKey) %>
(REMOTE_USER)<%= Request.ServerVariables("REMOTE_USER") %>
(HTTP_REMOTE_USER)<%= Request.ServerVariables("HTTP_REMOTE_USER") %>

attribute response from the IdP (HTTP_SHIB_ATTRIBUTES):



notes:
The AAP throws away invalid values (eg an unscopedAffiliation of value "myBoss@<yourdomain>" or a value with an invalid scope which scope is checked)
The raw attribute response (HTTP_SHIB_ATTRIBUTES) is NOT filtered by the AAP and should therefore be disabled for most applications (exportAssertion=false).



<% For Each strKey In Request.ServerVariables %> <% Next %>
<%= strKey %> <%= Request.ServerVariables(strKey) %>