Very Basic Overview of SSO
IdP (Identity Provider): A web-based system that can authenticate a user on behalf of another system called a SP (for Service Provider).
In this implementation of SSO, the SP consists of the Shibboleth SP version 3 software. See https://shibboleth.atlassian.net/wiki/spaces/SP3/overview .
Upon successful login at the IdP, the IdP will send information about the user back to the SP as "attributes".
Among other things, The SP must be configured to specify which of these attributes should be passed to the shrine code (in the form of HTTP request attributes).
Installation Layout
The following instructions assume that (1) you are using Tomcat as your application server, and (2) Apache and Tomcat are running on the same host. Shibboleth SP software runs as an apache module + daemon.
For our own local installation the following layout is used:
/opt/shrine/tomcat ← Tomcat home
/etc/shibboleth ← Shibboleth configuration files
/etc/httpd/* ← Apache configuration files
/var/www/html ← Apache static content as set in, for instance, /etc/httpd/conf/httpd.conf
Sample configuration files
They can be found in the Git repository in the shrine-setup module, specifically at shrine-setup/src/main/resources/sso
Overview
Content Tools