A few possible Shibboleth attributes

[(none)=not released or empty]
HTTP_SHIB_APPLICATION_ID           : 
HTTP_SHIB_IDENTITY_PROVIDER        : 
HTTP_SHIB_PERSON_UID               : 
HTTP_SHIB_PERSON_COMMONNAME        : 
HTTP_SHIB_PERSON_MAIL              : 
HTTP_SHIB_PERSON_TELEPHONENUMBER   : 
HTTP_SHIB_EP_SCOPEDAFFILIATION     :  [scope is usually checked]
HTTP_SHIB_EP_UNSCOPEDAFFILITATION  : 
HTTP_SHIB_KUL_OUNUMBER             : 
HTTP_SHIB_KUL_PRIMOUNUMBER         : 
REMOTE_USER                        :  [usually mapped from eduPersonPrincipalName (EPPN) in AAP.xml]
HTTP_REMOTE_USER                   :  [=REMOTE_USER for IIS]
attribute response from the IdP (HTTP_SHIB_ATTRIBUTES):



notes:
This list does not contain all released attributes!
The AAP throws away invalid values (eg an unscopedAffiliation of value "myBoss@<yourdomain>" or a value with an invalid scope which scope is checked)
The raw attribute response (HTTP_SHIB_ATTRIBUTES) is NOT filtered by the AAP and should therefore be disabled for most applications (exportAssertion=false).


all environment variables