Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
S
SWITCHwayf
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
1
Merge Requests
1
Operations
Operations
Incidents
Analytics
Analytics
Repository
Value Stream
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
AAI
SWITCHwayf
Commits
fcd13438
Commit
fcd13438
authored
Mar 07, 2019
by
Lukas Haemmerle
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Added note on metadata-update script
parent
15e7e798
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
8 additions
and
3 deletions
+8
-3
DOC.md
DOC.md
+8
-3
No files found.
DOC.md
View file @
fcd13438
...
...
@@ -176,7 +176,7 @@ needs most time.
SAML2 Metadata support
----------------------
I
n case the WAYF/DS
should display the list of IdPs by parsing them from a
I
f the SWITCHwayf
should display the list of IdPs by parsing them from a
SAML2 Medatadata file that is used by Shibboleth:
-
Set $useSAML2Metadata in config.php to true
...
...
@@ -185,12 +185,17 @@ SAML2 Medatadata file that is used by Shibboleth:
-
Make sure the files specified in $metadataIDPFile and $metadataSPFile can be
written by the userthat executes the PHP script (the web server user,
e.g. www-data or _www)
-
You may want to execute php SWITCHwayf/bin/update-metadata.php
manually or with a cron job to avoid that delayed requests for users
who happen to trigger automatic processing of new metadata files.
See php bin/update-metadata.php -h for some details and
suggestions on how to use the script.
The parsed IDP and SP entries will be stored in $metadataIDPFile and
$metadataSPFile as executable PHP code, thus benefiting from opcode caching
(see chapter "Optimization" above).
(see chapter "Optimization" above)
if enabled
.
If an entry should changed, removed or extended in this automatically
If an entry should
be
changed, removed or extended in this automatically
generated file, one can extend the IDP definitions by modifying them in
the $IDPConfigFile. To overwrite IDP values with entries in the $IDPConfigFile,
make sure the entry $SAML2MetaOverLocalConf is set to 'false';
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment