| 79 | === SAML Single sign on === |
| 80 | |
| 81 | Signing in on the website happens through a separate sign-on-server. This server needs to implement the SAML2 protocol. The website uses the django-plugin "djangosaml2" which uses pysaml2 internally. |
| 82 | |
| 83 | There is a number of important settings to be made for SAML to work properly. |
| 84 | |
| 85 | ==== SAML_CONFIG ==== |
| 86 | |
| 87 | [[IncludeSource(website/trunk/website/conf/production/settings_live.py,start=95,end=171)]] |
| 88 | |
| 89 | In this structure there is a number of important parameters: |
| 90 | |
| 91 | - '''xmlsec_binary''': the location of the xmlsec program that is used internally. This should usually be /usr/bin/xmlssec1 |
| 92 | |
| 93 | |
| 94 | |
| 95 | |
| 96 | [[IncludeSource(website/trunk/website/conf/production/settings_live.py,start=69,end=181)]] |
| 97 | |
| 98 | |