Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

 /var/www/html ← Apache static content as set in, for instance, /etc/httpd/conf/httpd.conf

Quick Shibboleth Instructions for Adjusting Configuration 

...

Very Basic Overview

idP (Identity Provider): A web-based system that can authenticate a user on behalf of another system called SP (for Service Provider).

In the present case, the SP consists of the Shibboleth SP software. We are using Shibboleth SP-3version 3 software. See https://shibboleth.atlassian.net/wiki/spaces/SP3/overview .

idP (Identity Provider): A web-based system that can authenticate a user on behalf of another system (called SP, for Service Provider).

Upon successful login at the idP, the idP will send information about the user (in the present case, at least , "remote_user") back to the SP as "attributes".

Among other things, The SP must be configured to specify which of these attributes should be passed to the shrine code in the form of request headers (we are not using request attributes because that necessitates the use of AJP, which is being phased out of Tomcat).

Quick Shibboleth Instructions for Adjusting Configuration 

The following instructions are meant to get you going as quickly as possible. If you want to understand what's going on, go to the next section of this document.

There are five configuration files that need to go on the host that is running shibd (Shibboleth SP). They will be installed upon installing Shibboleth SP, and they need to be overlayed/modified to reflect your installation, as follows:

...