How to Create a UBITName Login (Shibboleth) Enabled Pod for WebApps

Shibboleth enabled images are provided for PHP and Perl. Tenants developing in languages other than Perl and PHP will be responsible for the installation and configuration of the authentication modules/libraries.

Operating System: Any

Applies To: Faculty or Staff using WebApps

Last Reviewed: September 1, 2022

Prerequisites

Instructions

  1. Complete the steps for How to create a new pod (aka container)
    • Make sure you select one of the Shibboleth images (shib-php or shib-perl) for step 7
  2. Open Applications > Routes
  3. Select the route for the pod you just created
  4. Select Actions > Edit (upper right corner of your screen)
  5. Click Secure route
  6. Change TLS Termination to Edge
  7. Change Insecure Traffic to Redirect
  8. Click Save
  9. Submit a request to allow your pod to communicate with the central Shibboleth servers using the Central WebApps Service request form.

It may take up to two weeks for your request to be completed.

Using Shibboleth

Shibboleth authentication should be managed using .htaccess files.  A very basic example of how to require Shibboleth authentication is below.  See the links under Related Links for more details.

.htaccess

 

AuthType shibboleth

ShibRequestSetting requireSession 1

Require valid-user

 

See also

Still need help?

Contact the UBIT Help Center.