advice about confluence/shibboleth integration

[Cantor, Scott]

On 11/15/17, 11:53 AM, "users on behalf of Pablo Escobar Lopez" <users-bounces at shibboleth.net on behalf of pablo.escobarlopez at unibas.ch> wrote:

> My setup is working but I would like to improve it to look similar to https://issues.shibboleth.net/ . Right now my users land in the
> shibboleth authentication page to select an idp when accessing the index page but I would like that they land in the wiki main
> page and then be redirected to the idp selection menu when clicking in the login button in the top right corner like in
> https://issues.shibboleth.net/ .

The SP for a Confluence system should be configured for a "lazy/passive" session with just the dummy "require shibboleth" rule. You're requiring a session, but Confluence deals with that, the SP shouldn't need to. It just sits there and if there's a SAML session it will forward the variables into the request for the plugin to pick up.

> I guess that for this I should use the "Embedded Discovery Service" and do some tweaks of the frontpage in Jira. Is that right?

No. Discovery is a separate issue and is tied into the SP configuration once the Confluence seraph configuration redirects to /Shibboleth.sso/Login to start the login process.

-- Scott