| | 79 | === SAML Single sign on === |
| | 80 | |
| | 81 | Signing in on the website happens through a separate sign-on-server. This server needs to implement the SAML2 protocol. The website uses the django-plugin "djangosaml2" which uses pysaml2 internally. |
| | 82 | |
| | 83 | There is a number of important settings to be made for SAML to work properly. |
| | 84 | |
| | 85 | ==== SAML_CONFIG ==== |
| | 86 | |
| | 87 | [[IncludeSource(website/trunk/website/conf/production/settings_live.py,start=95,end=171)]] |
| | 88 | |
| | 89 | In this structure there is a number of important parameters: |
| | 90 | |
| | 91 | - '''xmlsec_binary''': the location of the xmlsec program that is used internally. This should usually be /usr/bin/xmlssec1 |
| | 92 | |
| | 93 | |
| | 94 | |
| | 95 | |
| | 96 | [[IncludeSource(website/trunk/website/conf/production/settings_live.py,start=69,end=181)]] |
| | 97 | |
| | 98 | |