WG: Alternatives to IP

Peter Schober peter.schober at univie.ac.at
Thu May 28 18:29:36 UTC 2020


* Weth Fabian <Fabian.Weth at pol.hfoed.bayern.de> [2020-05-28 14:28]:
> How could institutions, who aren't able to give static ip-adresses,
> use shibboleth?

Short version: IP adresses don't matter for Shibboleth.

No static IP addresses for your end users is irrelevant: Shibboleth
replaces authorisation based on the end users IP address with
something else (SAML assertions) that works from anywhere.

No static IP address for the Shibboleth IDP (or SP) web *server*
simply means you'd have to have some process in place that updates DNS
("dynamic DNS") whenever the server's (non-static) IP address changes.
Also has nothing to do with Shibboleth.

> What are alternative technical solutions?

Alternatives to what, excatly?
You'll need to provide more details.

Or maybe just talk to DFN:
https://www.aai.dfn.de/kontakt/

Best regards,
-peter


More information about the users mailing list