Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

IdP (Identity Provider): A web-based system that can authenticate a user on behalf of another system called a SP (for Service Provider).

...

Among other things, The SP must be configured to specify which of these attributes should be passed to the shrine code (in the form of HTTP request attributes).

Installation Layout

The following instructions assume that (1) you are using Tomcat as your application server, and (2) Apache and Tomcat are running on the same host. Shibboleth SP software runs as an apache module + daemon.

For our own local installation the following layout is used:

/opt/shrine/tomcat ← Tomcat home

/etc/shibboleth ← Shibboleth configuration files

/etc/httpd/* ← Apache configuration files

/var/www/html ← Apache static content as set in, for instance, /etc/httpd/conf/httpd.conf

Sample configuration files

They can be found in the Git repository in the shrine-setup module, specifically at shrine-setup/src/main/resources/sso