Skip to content

Commit

Permalink
Update shibM.adoc
Browse files Browse the repository at this point in the history
  • Loading branch information
khazelton authored Jul 2, 2021
1 parent 0378148 commit 4a6ed6d
Showing 1 changed file with 8 additions and 4 deletions.
12 changes: 8 additions & 4 deletions shibM.adoc
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
### Protecting midPoint with Shibboleth: Proper configuration

* Protect the admin GUI with shib
** Edit ...container_files/httpd/conf/midpoint.conf.auth.shibbolethmidpoint.conf.auth.shibboleth to match this
* Protect the admin GUI with shib +
Edit ...container_files/httpd/conf/midpoint.conf.auth.shibbolethmidpoint.conf.auth.shibboleth to match the following
[source,xml]
----
Timeout 2400
Expand All @@ -26,7 +27,9 @@ ProxyPass /midpoint ajp://localhost:9090/midpoint secret=s3cr3t timeout=2400 ret
</Location>
----

** Set the user name header to REMOTE_USER: Edit .../midpoint_server/container_files/mp-home/post-initial-objects/securityPolicy/000-security-policy.xml
* Set the user name header to REMOTE_USER +
Edit .../midpoint_server/container_files/mp-home/post-initial-objects/securityPolicy/000-security-policy.xml
[source,xml]
----
<modules>
Expand All @@ -39,7 +42,8 @@ ProxyPass /midpoint ajp://localhost:9090/midpoint secret=s3cr3t timeout=2400 ret
</modules>...
----

** Set Shibboleth as the authentication method for the midPoint admin GUI. Include the following in the list of <sequence> statements that follow after </modules> in the flexible authentication section of the above file.
* Set Shibboleth as the authentication method for the midPoint admin GUI +
Edit the above file to include the below in the list of <sequence> statements that follow after </modules>
[source,xml]
----
Expand Down

0 comments on commit 4a6ed6d

Please sign in to comment.