WG: Alternatives to IP
Peter Schober
peter.schober at univie.ac.at
Thu May 28 18:29:36 UTC 2020
* Weth Fabian <Fabian.Weth at pol.hfoed.bayern.de> [2020-05-28 14:28]:
> How could institutions, who aren't able to give static ip-adresses,
> use shibboleth?
Short version: IP adresses don't matter for Shibboleth.
No static IP addresses for your end users is irrelevant: Shibboleth
replaces authorisation based on the end users IP address with
something else (SAML assertions) that works from anywhere.
No static IP address for the Shibboleth IDP (or SP) web *server*
simply means you'd have to have some process in place that updates DNS
("dynamic DNS") whenever the server's (non-static) IP address changes.
Also has nothing to do with Shibboleth.
> What are alternative technical solutions?
Alternatives to what, excatly?
You'll need to provide more details.
Or maybe just talk to DFN:
https://www.aai.dfn.de/kontakt/
Best regards,
-peter
More information about the users
mailing list