-all SHIB headers- (HTTP_SHIB_ATTRIBUTES is not shown in this list) '; foreach ($_SERVER as $key => $value) { $fkey='_'.$key; if ( strpos($fkey,'SHIB')>1 && $key!="HTTP_SHIB_ATTRIBUTES") # if ( strpos($fkey,'SHIB')>1 ) { echo ''; echo ''.$key.''.$value.''; echo ''; } } echo '(REMOTE_USER)'.$_SERVER['REMOTE_USER'].''; echo '(HTTP_REMOTE_USER)'.$_SERVER['HTTP_REMOTE_USER'].''; echo ''; ?>
attribute response from the IdP (HTTP_SHIB_ATTRIBUTES):
<?php echo $_SERVER["HTTP_SHIB_ATTRIBUTES"]; ?>


notes:
The AAP throws away invalid values (eg an unscopedAffiliation of value "myBoss@<yourdomain>" or a value with an invalid scope which scope is checked)
The raw attribute response (HTTP_SHIB_ATTRIBUTES) is NOT filtered by the AAP and should therefore be disabled for most applications (exportAssertion=false).

---

$_REQUEST '; foreach ($_REQUEST as $key => $value) { echo ''; echo ''.$key.''.$value.''; echo ''; } echo '' ?>

---

$_SERVER '; foreach ($_SERVER as $key => $value) { echo ''; echo ''.$key.''.$value.''; echo ''; } echo '' ?>

---

$_SESSION '; foreach ($_SESSION as $key => $value) { echo ''; echo ''.$key.''.$value.''; echo ''; } echo '' ?>

---