Shib-enabling 25-Live ...

[Jacob Lundberg]

Hi Steven,

On Tue, 2013-06-25 at 13:37 -0400, Steven Carmody wrote:
> we're actually going to be running 25-Live locally. Is there any 
> document about how to integrate Shib in that scenario ?

No, you found the only documentation I know of for external
installations of 25Live.  Our IT does not support them, so I can't say
for certain if that's all there is.

> --- so my first guess is that Shib-enabling this local instance is going 
> to be more than just "use Shib to protect this path in the url space".

You have to enable Shibboleth authentication in settings.txt and maybe
also 25live_common.asn in the application.  The change is to set
RemoteAuthentication=Shibboleth (I think it is blank by default).

Then you must protect the SSO resource (assuming instance name "brown"):
https://25live.collegenet.com/25live/data/brown/run/login.shibboleth
(would be what we would protect if we were hosting it)

And if you do not want to allow anonymous viewers also protect the main
application (again, this would be the hosted path; I'm not sure of the
exact path in your case):
https://25live.collegenet.com/brown/

Finally, you will have to figure out what attributes to map ... this is
an area where customers sometimes have difficulty.  The WSW wiki topic
you listed should help.  Two common sticking points are dealing with the
scope on a scoped attribute for x-r25-user or multiple values, and I
recommend you avoid the use of x-r25-security-group unless you like
headaches.

Good luck,
-Jacob

-- 

Jacob Lundberg
Director, IT Services
jacob at collegenet.com
503.290.0100 (voice)
503.973.5252 (fax)
503.901.8343 (cell)