About Features Downloads Getting Started Documentation Events Support GitHub

Love VuFind®? Consider becoming a financial supporter. Your support helps build a better VuFind®!

Site Tools


Warning: This page has not been updated in over over a year and may be outdated or deprecated.
configuration:authentication

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
configuration:authentication [2019/07/23 19:26] – [Supported Options] demiankatzconfiguration:authentication [2024/01/19 14:17] (current) – [Persistent Login] demiankatz
Line 1: Line 1:
 ====== Authentication ====== ====== Authentication ======
  
-VuFind offers several options for allowing users to log in and out of the system.+VuFind® offers several options for allowing users to log in and out of the system.
  
-By default, VuFind will manage its own database of user accounts. This configuration can be changed to use a variety of external systems.+By default, VuFind® will manage its own database of user accounts. This configuration can be changed to use a variety of external systems.
  
 ===== Supported Options ===== ===== Supported Options =====
  
-Currently, VuFind supports the following options in the [Authentication] section of [[.files:config.ini]].+Currently, VuFind® supports the following options in the [Authentication] section of [[.files:config.ini]].
  
 Basic Options: Basic Options:
  
-  * AlmaDatabase - Use VuFind's built-in user database in combination with [[configuration:ils:alma|Alma]]+  * AlmaDatabase - Use VuFind®'s built-in user database in combination with [[configuration:ils:alma|Alma]]
   * CAS - Use the Central Authentication Service   * CAS - Use the Central Authentication Service
-  * Database - Use VuFind's built-in user database+  * Database - Use VuFind®'s built-in user database
   * Facebook - Use Facebook's login mechanism (not recommended)   * Facebook - Use Facebook's login mechanism (not recommended)
   * ILS - Use your integrated library system, through the [[development:plugins:ils_drivers|ILS driver]].   * ILS - Use your integrated library system, through the [[development:plugins:ils_drivers|ILS driver]].
   * LDAP - Use the Lightweight Directory Access Protocol   * LDAP - Use the Lightweight Directory Access Protocol
 +  * PasswordAccess - Require a single password (not username/password combination) for access (useful for simple password protection of entire instances)
   * [[shibboleth|Shibboleth]] - Use Shibboleth single sign-on   * [[shibboleth|Shibboleth]] - Use Shibboleth single sign-on
   * SIP2 - Use the SIP2 "Standard Interchange Protocol"   * SIP2 - Use the SIP2 "Standard Interchange Protocol"
Line 23: Line 24:
  
   * ChoiceAuth - Allow the user to choose between several of the Basic Options.   * ChoiceAuth - Allow the user to choose between several of the Basic Options.
 +  * Email - Allow the user to log in using a link in an email sent to the address associated with an existing account (best used with ChoiceAuth or certain ILSes). When using, you should run the "util expire_auth_hashes" [[administration:command_line_utilities|command line utility]] periodically to clean up expired hashes from the database.
   * MultiAuth - Attempt a serial chain of Basic Options without providing user choice (not all options supported).   * MultiAuth - Attempt a serial chain of Basic Options without providing user choice (not all options supported).
   * MultiILS - Attempt a serial chain of ILS authentication configurations (for use in a consortial environment).   * MultiILS - Attempt a serial chain of ILS authentication configurations (for use in a consortial environment).
Line 28: Line 30:
 It is always worth checking [[.files:config.ini]] for additional options, in case more have been added since the last update to this document. It is always worth checking [[.files:config.ini]] for additional options, in case more have been added since the last update to this document.
  
 +===== Persistent Login =====
 +
 +Beginning with release 10.0, you can optionally configure specific authentication methods to support persistent login, allowing the system to remember user logins for a fixed number of days. See the persistent_login setting (and associated comments) in [[.files:config.ini]] for more details.
 ---- struct data ---- ---- struct data ----
 +properties.Page Owner : 
 ---- ----
  
configuration/authentication.1563909978.txt.gz · Last modified: 2019/07/23 19:26 by demiankatz