From 4a6ed6d1405548164d07f7501fef8409a960f070 Mon Sep 17 00:00:00 2001 From: Keith Hazelton Date: Fri, 2 Jul 2021 06:50:33 -0500 Subject: [PATCH] Update shibM.adoc --- shibM.adoc | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/shibM.adoc b/shibM.adoc index d0d1e02..9c6cba8 100644 --- a/shibM.adoc +++ b/shibM.adoc @@ -1,7 +1,8 @@ ### Protecting midPoint with Shibboleth: Proper configuration -* Protect the admin GUI with shib -** Edit ...container_files/httpd/conf/midpoint.conf.auth.shibbolethmidpoint.conf.auth.shibboleth to match this +* Protect the admin GUI with shib + +Edit ...container_files/httpd/conf/midpoint.conf.auth.shibbolethmidpoint.conf.auth.shibboleth to match the following + [source,xml] ---- Timeout 2400 @@ -26,7 +27,9 @@ ProxyPass /midpoint ajp://localhost:9090/midpoint secret=s3cr3t timeout=2400 ret ---- -** Set the user name header to REMOTE_USER: Edit .../midpoint_server/container_files/mp-home/post-initial-objects/securityPolicy/000-security-policy.xml +* Set the user name header to REMOTE_USER + +Edit .../midpoint_server/container_files/mp-home/post-initial-objects/securityPolicy/000-security-policy.xml + [source,xml] ---- @@ -39,7 +42,8 @@ ProxyPass /midpoint ajp://localhost:9090/midpoint secret=s3cr3t timeout=2400 ret ... ---- -** Set Shibboleth as the authentication method for the midPoint admin GUI. Include the following in the list of statements that follow after in the flexible authentication section of the above file. +* Set Shibboleth as the authentication method for the midPoint admin GUI + +Edit the above file to include the below in the list of statements that follow after [source,xml] ----