Differences

This shows you the differences between two versions of the page.

--- configuration:shibboleth [2016/09/09 09:03] – [Shibboleth Single Logout] emaijala
+++ configuration:shibboleth [2020/06/30 14:36] – [Shibboleth Setup] demiankatz
@@ Line 10: / Line 10: @@
     </If>
     <Else>
-      Require all granted
+      AuthType shibboleth
+      Require shibboleth
     </Else>
 </code>
-The settings on VuFind side are found in the Shibboleth section in config.ini. Starting with VuFind 3.2 debug level log includes Shibboleth authentication handler messages to aid in debugging any issues with the authentication. These messages include the environment variables so that you can check if the environment variables that the Shibboleth module sets up matc the variable names in config.ini.
+Note: the "Else" clause can simply be "require all granted" if you are not using the Shibboleth "logout" setting... but if you are using "logout," you need access to Shibboleth attributes at all times, and thus must always require the Shibboleth module.
+The settings on VuFind side are found in the Shibboleth section in config.ini. Starting with VuFind 4.0 debug level log includes Shibboleth authentication handler messages to aid in debugging any issues with the authentication. These messages include the environment variables so that you can check if the environment variables that the Shibboleth module sets up matc the variable names in config.ini.
 ===== Shibboleth Single Logout =====
-Support for Shibboleth back-channel single logout is available starting from VuFind version 3.2. Single logout is especially important in public terminals where the Shibboleth Identity Provider would keep the user's session alive unless the browser is closed too regardless of whether the user logged out from VuFind.
+Support for Shibboleth back-channel single logout is available starting from VuFind version 4.0. Single logout is especially important in public terminals where the Shibboleth Identity Provider would keep the user's session alive unless the browser is closed too regardless of whether the user logged out from VuFind.
 N.B. VuFind's Shibboleth logout notification handling requires the PHP SOAP module installed.