<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>Tom Scavo kirjoitti 18.3.2012 kello 18.54:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>On Fri, Mar 16, 2012 at 12:30 PM, Leif Johansson <<a href="mailto:leifj@sunet.se">leifj@sunet.se</a>> wrote:<br><blockquote type="cite"><br></blockquote><blockquote type="cite">There is already a fully functioning version of Shibboleth-for-crowd<br></blockquote><blockquote type="cite">that supports entitlement-driven-groups. <a href="http://Eduix.fi">Eduix.fi</a> has done it for<br></blockquote><blockquote type="cite">NORDUNet where it has been in operation for > 1y.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">I've cc:ed Juhani who can send you links etc.<br></blockquote><br>I'm very interested in this!<br><br>Thanks!<br><br>Tom<br></div></blockquote></div><br><div>Hi,</div><div><br></div><div>You can download a version of the module from <a href="https://portal.nordu.net/display/NORDUwiki/Crowd+Shibboleth+Module">https://portal.nordu.net/display/NORDUwiki/Crowd+Shibboleth+Module</a></div><div><br></div><div>This is the original version developed for NORDUnet. I believe the files are a bit outdated as there are a few tweaks done for NORDUnet after releasing those files. There is a readme file that should help you get started if you know Crowd and Java. The solution is based on having Crowd behind Apache running Shibboleth - just like the Confluence Authenticator. Note that this isn't a plugin in the sense that you can just install it and start using it. Depending on your use case you will probably need to do some modifications. </div><div><br></div><div>Also note that it probably will not work with the latest version of Crowd but can be easily fixed. Recently we have worked on a customized version of the plugin for a couple of customers and it's running perfectly on the newest Crowd versions. Some new stuff we have recently added for these customers:</div><div>* support for Cross Domain SSO (which Crowd doesn't support out of the box)</div><div>* a fix to trigger a sync of a new user into Confluence (there is a annoying bug/feature with the Embedded Crowd approach in the newer Confluence versions: when using Crowd SSO a new user can't log into Confluence until the directory is synced)</div><div><br></div><div>These features will be eventually updated on the page above once they are installed for NORDUnet.</div><div><br></div><div>The biggest benefit of using this module is that you only need to Shibbolize Crowd. Once you have done that you can connect any number of Atlassian applications to Crowd SSO and user management in the standard Atlassian way. This means that you don't need to worry about breaking your Shibboleth login when updating Confluence or Jira. I'm sure anyone using the Confluence Shibboleth Authenticator has noticed that things break too often when Atlassian releases a new version. Shibbolizing Crowd means that you are free to upgrade Confluence and Jira whenever you want: you'll only need to check that they are compatible with the version of Crowd that you are using.</div><div><br></div><div>As an example we have one customer who are using this solution to enable federated login to:</div><div>* 2 instances of Confluence on two different domains</div><div>* 1 Jira instance</div><div>* 1 Bamboo instance</div><div>* Subversion</div><div><br></div><div>If anyone needs help implementing this we are happy to provide services and support for the module. We (Eduix) are one of the Atlassian Experts: <a href="http://www.atlassian.com/resources/experts">http://www.atlassian.com/resources/experts</a></div><div><br></div><div>Cheers,</div><div>Juhani</div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><div>-- <br>Juhani Gurney<br>CTO<br><br>+358 40 7624785<br><a href="mailto:juhani.gurney@eduix.fi">juhani.gurney@eduix.fi</a><br><br>Eduix Ltd<br>Hämeenkatu 26<br>33200 Tampere</div><div>Finland<br><a href="http://www.eduix.fi">http://www.eduix.fi</a></div><div><br></div></div></span><br class="Apple-interchange-newline">
</div>
<br></body></html>