enabling user specificed .htaccess files with Shibboleth

Peter Schober peter.schober at univie.ac.at
Thu Aug 2 10:56:10 EDT 2012

* Cantor, Scott <cantor.2 at osu.edu> [2012-08-02 16:26]:
> If you need some apps to be federated and some not, that's what the
> Application feature in the SP is for (you can have separate metadata
> per app).

Yeah but resource owners can change the app via .htaccess so that
wouldn't accomplish what the OP intented, IMO.

The only thing I can imagine the SP could do is implement something
like httpd's AllowOverride, so that one could centrally limit what
shib-specific stuff could be added to .htaccess
But, again, not that I can see/understand this being necessary.

More information about the users mailing list