diff --git a/docs/30_Requirements.md b/docs/30_Requirements.md index 03d6241941b437f011506c31257e3ba842e98b26..ec9e519730e1aa1ebd2a890adc5200fbe2237542 100644 --- a/docs/30_Requirements.md +++ b/docs/30_Requirements.md @@ -2,3 +2,4 @@ * PHP 8 (up to 8.3) * PHP web application with mod_shibboleth +* Shibboleth must be configured to allow logins from other organizations diff --git a/docs/40_Installation.md b/docs/40_Installation.md index b8a7bd9e7111361831c29440ee820364767323e9..bdb5d51793cd07c143f561e93a601ed3eb662248 100644 --- a/docs/40_Installation.md +++ b/docs/40_Installation.md @@ -1,5 +1,22 @@ ## Installation -* In the webroot create a subfolder "login_aai". +* In the webroot create a subfolder "login_aai". +* Extract the files there. +* Do NOT protect this folder with Shibboleth that it can be accessed anonymous +* Copy config.php.dist to config.php and make your changes. See chapter Configuration. * Set a Link for Login to `/login_aai/` where needed -* Copy config.php.dist to config.php and make your changes. + +The web ui offers just a frontend for your visitors to link multiple organisations. + +That the login at other IDP work you need to + +* create a Service provider on your AAI Federation +* configure Shibboleth and whitelist the wanted IDPs +* For access from other federations (countries): + * You and your partner need to enablle EDUGAIN. + * The parter IDP must enable the domain of your website + +Links: + +* <https://en.wikipedia.org/wiki/Shibboleth_(software)> +* <https://met.refeds.org/>