Shibboleth authentication

[Tom King]

Hi,

I'm looking at implementing NEMO to replace MRBS for our laboratory booking system and am wondering - has anyone set it up to use Shibboleth authentication?

I work for a federated organisation and I need to cater for users who are outside the scope of my local kerberos domain (but who are in the scope of our organisational shibboleth domain)

Many thanks!

Tom

[Mathieu Rampant]

Hi Tom,

I have not personally set it up with Shibboleth, however it seems pretty similar to what we do at NIST with Kerberos. 

Here is my recommendation:

1. Set up your shibboleth authentication in nginx

2. Create a Nemo authentication backend to use the remote user from nginx. Something like NginxKerberosAuthorizationHeaderAuthenticationBackend in https://github.com/usnistgov/NEMO/blob/master/NEMO/views/authentication.py

The other option would be to look for a django shibboleth authentication plugin. there seems to be a couple of options out there 

If somebody has done that already, or if you end up doing it yourself, please consider writing a plugin so that others can benefit from it in the future 

Thanks 

Mathieu

--
You received this message because you are subscribed to the Google Groups "nemo" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nemo+uns...@list.nist.gov.
To view this discussion on the web visit https://groups.google.com/a/list.nist.gov/d/msgid/nemo/8a26c28a-86ff-4239-9aca-3d506c59987dn%40list.nist.gov.

[Tom King]

Dear Mathieu,

Thank you, I'll see what I can do - this is unforutnately not my area at all, but if I get anything working I'll post an update.

Kind regards,

Tom