also check REMOTE_USER

[peter-]

Maybe also add a call to request.getRemoteUser() to shib.jsp, to make sure whatever mapped to REMOTE_USER also works fine.

[pdurbin]

Hmm, I tried adding

<% out.println("remote user: " + request.getRemoteUser());%>

but I'm getting "remote user: null".

Other information such as "eppn: myself@testshib.org" is still coming through ok.

[peter-]

The Shib Wiki has links for fixing that on Tomcat (tomcatAuthentication="false" on the AJP-Connector), no idea about Glassfish.