University at Buffalo - The State University of New York
Skip to Content

Step-by-Step Instructions

How to Create a UBITName Login (Shibboleth) Enabled Pod for WebApps

Shibboleth enabled images are provided for PHP 5.6 and Perl 5.20.  Tenants developing in languages other than Perl and PHP will be responsible for the installation and configuration of the authentication modules/libraries.

Operating System: Any

Applies To: Faculty or Staff using WebApps

Last Reviewed: March 31, 2017

Prerequisites

Instructions

  1. Complete the steps for How to create a new pod (aka container)
    • Make sure you select one of the Shibboleth images (shib-php:5.6 or shib-perl:5.20) for step 4
  2. Open Applications > Routes
  3. Select the route for the pod you just created
  4. Select Actions > Edit (upper right corner of your screen)
  5. Click Show options for secured routes
  6. Change TLS Termination to Edge
  7. Change Insecure Traffic to Redirect
  8. Click Save
  9. Submit a request to allow your pod to communicate with the central Shibboleth servers using the Central WebApps Service request form.

It may take up to two weeks for your request to be completed.

Using Shibboleth

Shibboleth authentication should be managed using .htaccess files.  A very basic example of how to require Shibboleth authentication is below.  See the links under Related Links for more details.

.htaccess

 

AuthType shibboleth

ShibRequestSetting requireSession 1

Require valid-user

 

See also

Contact the UBIT Help Center

Have a UBITName? You may also use the UBIT Help Center Online (login required).

(Required)
 
 
(xxx) xxx-xxxx
(Required)
Use your @buffalo.edu email, if known
 
(Required)