Platform Explorer / Nuxeo Platform LTS 2017 9.10

Component sample.shibboleth.config

In bundle org.nuxeo.runtime

Contributions

XML Source

<component name="sample.shibboleth.config">

  <require>org.nuxeo.ecm.platform.usermanager.UserManagerImpl</require>

  <!--
  Disabled by default to lets administrator set their own AuthentificationChain
  To edit it, go to templates/shibboleth/config/shibboleth-login-config.xml

  <require>org.nuxeo.ecm.platform.ui.web.auth.WebEngineConfig</require>

  <extension target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
    point="chain">
    <authenticationChain>
      <plugins>
        <plugin>BASIC_AUTH</plugin>
        <plugin>SHIB_AUTH</plugin>
        <plugin>FORM_AUTH</plugin>
        <plugin>WEBENGINE_FORM_AUTH</plugin>
        <plugin>ANONYMOUS_AUTH</plugin>
        <plugin>WEBSERVICES_AUTH</plugin>
      </plugins>
    </authenticationChain>
  </extension>
  -->

  <extension target="org.nuxeo.ecm.platform.shibboleth.service.ShibbolethAuthenticationService"
    point="config">
    <config>
      <uidHeaders>
        <default>uid</default>
      </uidHeaders>

      <loginURL>https://host/Shibboleth.sso/WAYF</loginURL>
      <logoutURL>https://host/Shibboleth.sso/logout</logoutURL>

      <!-- Add others fieldMappings if needed -->
      <fieldMapping header="uid">username</fieldMapping>
      <fieldMapping header="mail">email</fieldMapping>
    </config>
  </extension>
</component>