owncloud/nextcloud integration with multiple idps?

[Pablo Escobar Lopez]

2017-11-15 18:27 GMT+01:00 Rainer Hoerbe <rainer at hoerbe.at>:

> I can share my SATOSA config repo in private if you need.
>

That would be great because I have never used SATOSA. Having a working
example would be helpful.

Thanks!




>
> Cheers, Rainer
>
> Am 15.11.2017 um 17:59 schrieb Pablo Escobar Lopez <
> pablo.escobarlopez at unibas.ch>:
>
> Thanks David and Rainer for your advice.
>
> Now that I know that in theory it should work I will try both approaches
> to see which one works better for our use case.
>
> regards,
> Pablo.
>
>
>
> 2017-11-15 17:49 GMT+01:00 Rainer Hoerbe <rainer at hoerbe.at>:
>
>> Using SATOSA as a proxy for a 1:n mapping is fairly straightforward. I
>> have done it with rocketchat and external IDP discovery. This should work
>> for similar user cases as well.
>>
>> - Rainer
>>
>>
>> Am 15.11.2017 um 17:45 schrieb David Huebner <david.huebner at daasi.de>:
>>
>> Hi,
>>
>> should be doable with the nextcloud SSO & SAML app [1].
>> The SAML2 plugin there is only able to auth-n against a single IdP, but
>> apparently you can also use environment variables.
>>
>> So basically, protect everything with Apache & Shibboleth SP, set
>> REMOTE_USER accordingly and use it in nextcloud.
>>
>> The documentation mentions this near the end.
>>
>> I can't confirm that it works, since we are only running the plugin
>> against one IdP, but I don't see why it shouldn't.
>>
>> - David
>>
>> [1]: https://docs.nextcloud.com/server/12/admin_manual/configurat
>> ion_server/sso_configuration.html
>>
>> On 15.11.2017 17:24, Pablo Escobar Lopez wrote:
>>
>> Hi
>>
>> In our university we would like to deploy a owncloud/nextcloud instance
>> with shibboleth authentication and support for multiple idps.  We already
>> have the SP working.
>>
>> Can anyone confirm if this setup is possible? Is there any documentation
>> available about this specific topic?
>>
>> Thanks in advance for any help or advice.
>>
>> regards,
>> Pablo.
>>
>>
>> --
>> Pablo Escobar López
>> HPC systems engineer
>> sciCORE, University of Basel
>> SIB Swiss Institute of Bioinformatics
>> http://scicore.unibas.ch
>>
>>
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>>
>>
>
>
> --
> Pablo Escobar López
> HPC systems engineer
> sciCORE, University of Basel
> SIB Swiss Institute of Bioinformatics
> http://scicore.unibas.ch
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
>


-- 
Pablo Escobar López
HPC systems engineer
sciCORE, University of Basel
SIB Swiss Institute of Bioinformatics
http://scicore.unibas.ch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171115/29029f35/attachment-0001.html>