Talk:External (Shibboleth) Authentication

Shibboleth apache configuration

shib.conf: Apache Shibboleth configuration. Add the following directive

<LocationMatch ^/[^webwork2_files|^webwork2_course_files]>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  require valid-user
</LocationMatch>

When we put in the above we get a redirect loop after logging into shibboleth. We use this instead that seems to work better:

<Location /webwork2>
  AuthType shibboleth
  ShibRequireSession Off
  ShibUseHeaders On
  require shibboleth
</Location>

There could be an issue with the paths but it is hard to tell. Anyone else run into the redirect loop? Sorry for putting this here I wasn't sure where to put the comment --Daniel Mundra 19:50, 28 March 2014 (EDT)