owncloud/nextcloud integration with multiple idps?

[Rainer Hoerbe]

I can share my SATOSA config repo in private if you need.

Cheers, Rainer
> Am 15.11.2017 um 17:59 schrieb Pablo Escobar Lopez <pablo.escobarlopez at unibas.ch>:
> 
> Thanks David and Rainer for your advice.
> 
> Now that I know that in theory it should work I will try both approaches to see which one works better for our use case.
> 
> regards,
> Pablo.
> 
> 
> 
> 2017-11-15 17:49 GMT+01:00 Rainer Hoerbe <rainer at hoerbe.at <mailto:rainer at hoerbe.at>>:
> Using SATOSA as a proxy for a 1:n mapping is fairly straightforward. I have done it with rocketchat and external IDP discovery. This should work for similar user cases as well.
> 
> - Rainer
> 
> 
>> Am 15.11.2017 um 17:45 schrieb David Huebner <david.huebner at daasi.de <mailto:david.huebner at daasi.de>>:
>> 
>> Hi,
>> 
>> should be doable with the nextcloud SSO & SAML app [1].
>> The SAML2 plugin there is only able to auth-n against a single IdP, but apparently you can also use environment variables.
>> 
>> So basically, protect everything with Apache & Shibboleth SP, set REMOTE_USER accordingly and use it in nextcloud.
>> 
>> The documentation mentions this near the end.
>> 
>> I can't confirm that it works, since we are only running the plugin against one IdP, but I don't see why it shouldn't.
>> 
>> - David
>> 
>> [1]: https://docs.nextcloud.com/server/12/admin_manual/configuration_server/sso_configuration.html <https://docs.nextcloud.com/server/12/admin_manual/configuration_server/sso_configuration.html>
>> 
>> On 15.11.2017 17:24, Pablo Escobar Lopez wrote:
>>> Hi 
>>> 
>>> In our university we would like to deploy a owncloud/nextcloud instance with shibboleth authentication and support for multiple idps.  We already have the SP working.  
>>> 
>>> Can anyone confirm if this setup is possible? Is there any documentation available about this specific topic?
>>> 
>>> Thanks in advance for any help or advice.
>>> 
>>> regards,
>>> Pablo.
>>> 
>>> 
>>> -- 
>>> Pablo Escobar López
>>> HPC systems engineer
>>> sciCORE, University of Basel
>>> SIB Swiss Institute of Bioinformatics
>>> http://scicore.unibas.ch <http://scicore.unibas.ch/>
>>> 
>>> 
>> 
>> -- 
>> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg <https://wiki.shibboleth.net/confluence/x/coFAAg>
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>
> 
> 
> 
> -- 
> Pablo Escobar López
> HPC systems engineer
> sciCORE, University of Basel
> SIB Swiss Institute of Bioinformatics
> http://scicore.unibas.ch <http://scicore.unibas.ch/>
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171115/4c28bd92/attachment.html>