owncloud/nextcloud integration with multiple idps?

[Pablo Escobar Lopez]

Thanks David and Rainer for your advice.

Now that I know that in theory it should work I will try both approaches to
see which one works better for our use case.

regards,
Pablo.



2017-11-15 17:49 GMT+01:00 Rainer Hoerbe <rainer at hoerbe.at>:

> Using SATOSA as a proxy for a 1:n mapping is fairly straightforward. I
> have done it with rocketchat and external IDP discovery. This should work
> for similar user cases as well.
>
> - Rainer
>
>
> Am 15.11.2017 um 17:45 schrieb David Huebner <david.huebner at daasi.de>:
>
> Hi,
>
> should be doable with the nextcloud SSO & SAML app [1].
> The SAML2 plugin there is only able to auth-n against a single IdP, but
> apparently you can also use environment variables.
>
> So basically, protect everything with Apache & Shibboleth SP, set
> REMOTE_USER accordingly and use it in nextcloud.
>
> The documentation mentions this near the end.
>
> I can't confirm that it works, since we are only running the plugin
> against one IdP, but I don't see why it shouldn't.
>
> - David
>
> [1]: https://docs.nextcloud.com/server/12/admin_manual/
> configuration_server/sso_configuration.html
>
> On 15.11.2017 17:24, Pablo Escobar Lopez wrote:
>
> Hi
>
> In our university we would like to deploy a owncloud/nextcloud instance
> with shibboleth authentication and support for multiple idps.  We already
> have the SP working.
>
> Can anyone confirm if this setup is possible? Is there any documentation
> available about this specific topic?
>
> Thanks in advance for any help or advice.
>
> regards,
> Pablo.
>
>
> --
> Pablo Escobar López
> HPC systems engineer
> sciCORE, University of Basel
> SIB Swiss Institute of Bioinformatics
> http://scicore.unibas.ch
>
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
>


-- 
Pablo Escobar López
HPC systems engineer
sciCORE, University of Basel
SIB Swiss Institute of Bioinformatics
http://scicore.unibas.ch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171115/193fe046/attachment.html>