call for developers to assist with Confluence Shibboleth Authenticator project

[Juhani Gurney]

Tom Scavo kirjoitti 18.3.2012 kello 18.54:

> On Fri, Mar 16, 2012 at 12:30 PM, Leif Johansson <leifj at sunet.se> wrote:
>> 
>> There is already a fully functioning version of Shibboleth-for-crowd
>> that supports entitlement-driven-groups. Eduix.fi has done it for
>> NORDUNet where it has been in operation for > 1y.
>> 
>> I've cc:ed Juhani who can send you links etc.
> 
> I'm very interested in this!
> 
> Thanks!
> 
> Tom

Hi,

You can download a version of the module from https://portal.nordu.net/display/NORDUwiki/Crowd+Shibboleth+Module

This is the original version developed for NORDUnet. I believe the files are a bit outdated as there are a few tweaks done for NORDUnet after releasing those files. There is a readme file that should help you get started if you know Crowd and Java. The solution is based on having Crowd behind Apache running Shibboleth - just like the Confluence Authenticator. Note that this isn't a plugin in the sense that you can just install it and start using it. Depending on your use case you will probably need to do some modifications. 

Also note that it probably will not work with the latest version of Crowd but can be easily fixed. Recently we have worked on a customized version of the plugin for a couple of customers and it's running perfectly on the newest Crowd versions. Some new stuff we have recently added for these customers:
* support for Cross Domain SSO (which Crowd doesn't support out of the box)
* a fix to trigger a sync of a new user into Confluence (there is a annoying bug/feature with the Embedded Crowd approach in the newer Confluence versions: when using Crowd SSO  a new user can't log into Confluence until the directory is synced)

These features will be eventually updated on the page above once they are installed for NORDUnet.

The biggest benefit of using this module is that you only need to Shibbolize Crowd. Once you have done that you can connect any number of Atlassian applications to Crowd SSO and user management in the standard Atlassian way. This means that you don't need to worry about breaking your Shibboleth login when updating Confluence or Jira. I'm sure anyone using the Confluence Shibboleth Authenticator has noticed that things break too often when Atlassian releases a new version. Shibbolizing Crowd means that you are free to upgrade Confluence and Jira whenever you want: you'll only need to check that they are compatible with the version of Crowd that you are using.

As an example we have one customer who are using this solution to enable federated login to:
* 2 instances of Confluence on two different domains
* 1 Jira instance
* 1 Bamboo instance
* Subversion

If anyone needs help implementing this we are happy to provide services and support for the module. We (Eduix) are one of the Atlassian Experts: http://www.atlassian.com/resources/experts

Cheers,
Juhani

-- 
Juhani Gurney
CTO

+358 40 7624785
juhani.gurney at eduix.fi

Eduix Ltd
Hämeenkatu 26
33200 Tampere
Finland
http://www.eduix.fi



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120319/b43db5df/attachment-0001.html