Shibboleth - Revision history

Bert: /* How to request */

2022-10-08T23:24:03Z

How to request

← Older revision		Revision as of 01:24, 9 October 2022
Line 10:		Line 10:
	* What you will be using Shibboleth for and in general what your application will do. This explanation is required by ICTS. If you fail to convince them they will not grant your domain access.		* What you will be using Shibboleth for and in general what your application will do. This explanation is required by ICTS. If you fail to convince them they will not grant your domain access.
	* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes		* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes
	* ~~Explicitly state~~ you ~~grant~~ ULYSSIS ~~permission to edit the .htaccess file~~ to be able to export the required Shibboleth Metadata		* Preconfigure .htaccess in the root folder of the (sub)domain you are requesting Shibboleth for. This is required for ULYSSIS to be able to export the required Shibboleth Metadata.
			** ULYSSIS may view your .htaccess file to investigate any problems.
	* If you are not a recognised faculty union you will need to include an extra motivation why you require Shibboleth (as noted above)		* If you are not a recognised faculty union you will need to include an extra motivation why you require Shibboleth (as noted above)

Bert: /* Deploying Shibboleth */

2020-07-13T23:04:48Z

Deploying Shibboleth

← Older revision		Revision as of 01:04, 14 July 2020
Line 32:		Line 32:
	It is important to note that on logout the user will stay on the KU Leuven's IdP-page and your link will only be displayed. The user will NOT be redirected (even though this is the normale behaviour according to the Shibboleth documentation).		It is important to note that on logout the user will stay on the KU Leuven's IdP-page and your link will only be displayed. The user will NOT be redirected (even though this is the normale behaviour according to the Shibboleth documentation).

	As soon as a user is logged in, ~~his or hers~~ attributes will be available to your application. Attributes are certain properties that an account may have and that supply further information about them. Some examples are: first name, last name, mail, student id.		As soon as a user is logged in, their attributes will be available to your application. Attributes are certain properties that an account may have and that supply further information about them. Some examples are: first name, last name, mail, student id.
	All of these will be available as ~~HTTP headers~~. ~~But keep~~ in mind that ~~apache~~ might prefix ~~those~~ with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes		All of these will be available as environment variables. In PHP these are part of $_SERVER. Keep in mind that Apache might prefix the names of these variables with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes

	More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/.		More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/.

	[[Category:Webserver]]		[[Category:Webserver]]

Bert: /* Deploying Shibboleth */

2019-11-04T03:05:03Z

Deploying Shibboleth

← Older revision		Revision as of 05:05, 4 November 2019
Line 35:		Line 35:
	All of these will be available as HTTP headers. But keep in mind that apache might prefix those with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes		All of these will be available as HTTP headers. But keep in mind that apache might prefix those with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes

	More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/ .		More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/.

	[[Category:Webserver]]		[[Category:Webserver]]

Bert: /* Deploying Shibboleth */

2019-11-04T03:04:55Z

Deploying Shibboleth

← Older revision		Revision as of 05:04, 4 November 2019
Line 35:		Line 35:
	All of these will be available as HTTP headers. But keep in mind that apache might prefix those with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes		All of these will be available as HTTP headers. But keep in mind that apache might prefix those with REDIRECT_ multiple times (for example when mod_rewrite is used). For an overview of all attributes you can check out http://shib.kuleuven.be/secure/allAttributes

	More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/ . ~~But be aware of the fact that some of the documentation is very outdated (Most notably information about shib 1.3)~~		More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/ .

	[[Category:Webserver]]		[[Category:Webserver]]

Bert at 15:13, 28 August 2019

2019-08-28T15:13:43Z

← Older revision		Revision as of 17:13, 28 August 2019
Line 36:		Line 36:

	More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/ . But be aware of the fact that some of the documentation is very outdated (Most notably information about shib 1.3)		More general information on the KU Leuvens implementation can be found on http://shib.kuleuven.be/ . But be aware of the fact that some of the documentation is very outdated (Most notably information about shib 1.3)

			[[Category:Webserver]]

Vincenttc at 14:49, 13 July 2018

2018-07-13T14:49:31Z

← Older revision		Revision as of 16:49, 13 July 2018
Line 8:		Line 8:
	If you have SSL set up you need to send an email to request Shibboleth to ulyssis@ulyssis.org. The email must contain the following info:		If you have SSL set up you need to send an email to request Shibboleth to ulyssis@ulyssis.org. The email must contain the following info:
	* What domain you wish to use Shibboleth on (this must be a single domain, so keep subdomains and www in mind)		* What domain you wish to use Shibboleth on (this must be a single domain, so keep subdomains and www in mind)
	* What you will be using Shibboleth for and in general what your application will do. This ~~explenation~~ is required by ICTS. If you fail to convince them they will not grant your domain access.		* What you will be using Shibboleth for and in general what your application will do. This explanation is required by ICTS. If you fail to convince them they will not grant your domain access.
	* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes		* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes
	* Explicitly state you grant ULYSSIS permission to edit the .htaccess file to be able to export the required Shibboleth Metadata		* Explicitly state you grant ULYSSIS permission to edit the .htaccess file to be able to export the required Shibboleth Metadata

Yoa: /* How to request */

2017-11-20T17:45:34Z

How to request

← Older revision		Revision as of 19:45, 20 November 2017
Line 10:		Line 10:
	* What you will be using Shibboleth for and in general what your application will do. This explenation is required by ICTS. If you fail to convince them they will not grant your domain access.		* What you will be using Shibboleth for and in general what your application will do. This explenation is required by ICTS. If you fail to convince them they will not grant your domain access.
	* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes		* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes
	* Explicitly state you grant ULYSSIS permission to edit the .~~htacccess~~ file to be able to export the required Shibboleth Metadata		* Explicitly state you grant ULYSSIS permission to edit the .htaccess file to be able to export the required Shibboleth Metadata
	* If you are not a recognised faculty union you will need to include an extra motivation why you require Shibboleth (as noted above)		* If you are not a recognised faculty union you will need to include an extra motivation why you require Shibboleth (as noted above)

Bert: /* How to request */

2015-01-29T04:36:45Z

How to request

← Older revision		Revision as of 06:36, 29 January 2015
Line 6:		Line 6:
	To request Shibboleth access, you first need to make sure the domain you wish to use Shibboleth on has valid SSL certificates. Lately ICTS has been pushing that all traffic to the website is already over HTTPS before Shibboleth is issued. For more info you can check [[Getting SSL]]		To request Shibboleth access, you first need to make sure the domain you wish to use Shibboleth on has valid SSL certificates. Lately ICTS has been pushing that all traffic to the website is already over HTTPS before Shibboleth is issued. For more info you can check [[Getting SSL]]

	If you have SSL set up you need to send an email request Shibboleth to ulyssis@ulyssis.org. The email must contain the following info:		If you have SSL set up you need to send an email to request Shibboleth to ulyssis@ulyssis.org. The email must contain the following info:
	* What domain you wish to use Shibboleth on (this must be a single domain, so keep subdomains and www in mind)		* What domain you wish to use Shibboleth on (this must be a single domain, so keep subdomains and www in mind)
	* What you will be using Shibboleth for and in general what your application will do. This explenation is required by ICTS. If you fail to convince them they will not grant your domain access.		* What you will be using Shibboleth for and in general what your application will do. This explenation is required by ICTS. If you fail to convince them they will not grant your domain access.

Bert: /* How to request */

2015-01-29T04:36:04Z

How to request

← Older revision		Revision as of 06:36, 29 January 2015
Line 5:		Line 5:
	== How to request ==		== How to request ==
	To request Shibboleth access, you first need to make sure the domain you wish to use Shibboleth on has valid SSL certificates. Lately ICTS has been pushing that all traffic to the website is already over HTTPS before Shibboleth is issued. For more info you can check [[Getting SSL]]		To request Shibboleth access, you first need to make sure the domain you wish to use Shibboleth on has valid SSL certificates. Lately ICTS has been pushing that all traffic to the website is already over HTTPS before Shibboleth is issued. For more info you can check [[Getting SSL]]

			If you have SSL set up you need to send an email request Shibboleth to ulyssis@ulyssis.org. The email must contain the following info:
			* What domain you wish to use Shibboleth on (this must be a single domain, so keep subdomains and www in mind)
			* What you will be using Shibboleth for and in general what your application will do. This explenation is required by ICTS. If you fail to convince them they will not grant your domain access.
			* What attributes you wish to use and what you will do with them (and whether you will store them). You can find the list of attributes on https://admin.kuleuven.be/icts/services/aai/attributes
			* Explicitly state you grant ULYSSIS permission to edit the .htacccess file to be able to export the required Shibboleth Metadata
			* If you are not a recognised faculty union you will need to include an extra motivation why you require Shibboleth (as noted above)

			If your application is complete and correct we will file a formal request. We will of course notify you of ICTS' response.

	== Deploying Shibboleth ==		== Deploying Shibboleth ==

Bert at 04:29, 29 January 2015

2015-01-29T04:29:15Z

← Older revision		Revision as of 06:29, 29 January 2015
Line 2:		Line 2:

	ULYSSIS works together with ICTS to supply limited access to Shibboleth. We are however only able to supply Shibboleth to those approved by ICTS. In practice all faculty unions will be granted access if they can prove they have the technical ability to use Shibboleth in a safe and privacy friendly way. For other organisations it can be more difficult to get access, therefore it is best to write an extensive explenation of what you plan to do with Shibboleth, why your organisation requires it, what your organisation does, and other relevant information. We will then contact ICTS with your request.		ULYSSIS works together with ICTS to supply limited access to Shibboleth. We are however only able to supply Shibboleth to those approved by ICTS. In practice all faculty unions will be granted access if they can prove they have the technical ability to use Shibboleth in a safe and privacy friendly way. For other organisations it can be more difficult to get access, therefore it is best to write an extensive explenation of what you plan to do with Shibboleth, why your organisation requires it, what your organisation does, and other relevant information. We will then contact ICTS with your request.

			== How to request ==
			To request Shibboleth access, you first need to make sure the domain you wish to use Shibboleth on has valid SSL certificates. Lately ICTS has been pushing that all traffic to the website is already over HTTPS before Shibboleth is issued. For more info you can check [[Getting SSL]]

	== Deploying Shibboleth ==		== Deploying Shibboleth ==