====== Shibboleth and Library Cards ======

:!: // This feature was added in VuFind 8.0. //

===== Use case =====

Typical usage of Shibboleth authentication in a multi ILS environment is as follows:

You configure Shibboleth as an alternative authentication method and library cards are connected to that account using ILS username and password (through ILS driver)

But in the case where you want to connect your VuFind instance to multiple Shibboleth identity providers and also enable connecting accounts through library cards, you have to set it explicitly.

===== Setting multiple identity providers =====

  - Set Shibboleth to point out to WAYF/DS instead of a single identity provider. See more about identity provider discovery here: [[https://wiki.shibboleth.net/confluence/display/CONCEPT/IdPDiscovery|Shibboleth.net - Identity Provider Discovery]].
  - Enable option //allow_configuration_override// in the [Shibboleth] section of [[configuration:files:config.ini|config.ini]].
  - In the [[https://github.com/vufind-org/vufind/blob/dev/config/vufind/Shibboleth.ini|Shibboleth.ini]] configuration file, map the entityId of needed identity providers to instance names corresponding with [[configuration:ils:multibackend_driver|multi-backend configuration]] in [[https://github.com/vufind-org/vufind/blob/dev/config/vufind/MultiBackend.ini|MultiBackend.ini]] and eventually overwrite default attributes mapping for particular identity providers.

===== Enabling library cards for Shibboleth  =====
The configuration option for this feature is in the [Catalog] section of [[configuration:files:config.ini|config.ini]] and is called //auth_based_library_cards//. Just uncomment the example - set it to true.