Page History

...

REMOTE_USER: how REMOTE_USER will be populated. Note that "ecommonsid which is specific to HMS IT, comes first, so REMOTE_USER will be set to its value). Otherwise, the first attribute name that matches an attribute returned by the idP will be used.

The sessionHook attribute of the ApplicationDefaults element is the URL of code running on Tomcat. It will run before Shibboleth redirects the user to the wanted URL after the user authenticates. It is not populated for now. It will be used later for authorization.

    <ApplicationDefaults entityID="https://shrine-sso-node01.catalyst.harvard.edu"
                         REMOTE_USER="ecommonsid eppn uid persistent-id targeted-id"
                         signing="true"
    >

...