owncloud/nextcloud integration with multiple idps?

Rainer Hoerbe rainer at hoerbe.at
Wed Nov 15 11:49:51 EST 2017


Using SATOSA as a proxy for a 1:n mapping is fairly straightforward. I have done it with rocketchat and external IDP discovery. This should work for similar user cases as well.

- Rainer


> Am 15.11.2017 um 17:45 schrieb David Huebner <david.huebner at daasi.de>:
> 
> Hi,
> 
> should be doable with the nextcloud SSO & SAML app [1].
> The SAML2 plugin there is only able to auth-n against a single IdP, but apparently you can also use environment variables.
> 
> So basically, protect everything with Apache & Shibboleth SP, set REMOTE_USER accordingly and use it in nextcloud.
> 
> The documentation mentions this near the end.
> 
> I can't confirm that it works, since we are only running the plugin against one IdP, but I don't see why it shouldn't.
> 
> - David
> 
> [1]: https://docs.nextcloud.com/server/12/admin_manual/configuration_server/sso_configuration.html <https://docs.nextcloud.com/server/12/admin_manual/configuration_server/sso_configuration.html>
> 
> On 15.11.2017 17:24, Pablo Escobar Lopez wrote:
>> Hi 
>> 
>> In our university we would like to deploy a owncloud/nextcloud instance with shibboleth authentication and support for multiple idps.  We already have the SP working.  
>> 
>> Can anyone confirm if this setup is possible? Is there any documentation available about this specific topic?
>> 
>> Thanks in advance for any help or advice.
>> 
>> regards,
>> Pablo.
>> 
>> 
>> -- 
>> Pablo Escobar López
>> HPC systems engineer
>> sciCORE, University of Basel
>> SIB Swiss Institute of Bioinformatics
>> http://scicore.unibas.ch <http://scicore.unibas.ch/>
>> 
>>  
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171115/15558394/attachment.html>


More information about the users mailing list