[Koha-bugs] [Bug 18506] SSO - Shibboleth Only Mode

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18506

--- Comment #21 from Martin Renvoize <martin.renvoize at ptfs-europe.com> ---
(In reply to Matthias Meusburger from comment #20)
> Hi, 
> 
> I've done some testing, and it works consistently with the various
> combinations of opacShibOnly, OpacPublic and staffShibOnly.
> 
> However, when opacShibOnly is enabled, the authentication process always
> redirect to opac-user.pl, instead of the page the user was currently on
> (like a search result, for example).
> 
> The user should be redirected to the page he was on, like when opacShibOnly
> is disabled.

Noted, I'll take a look at doing this in a follow-up now.

> 
> Also I'm a little concerned that users might lock themselves out of the
> admin interface when enabling staffShibOnly, but that's nothing an SQL query
> to modify the syspref's value can't fix.

So I agree with this, but as it's the feature our customers have requested I
think it's a valid use case.

What we do at PTFS-E is use the syspref override in the vhosts and setup a
second alias for local support so we can still login.

-- 
You are receiving this mail because:
You are watching all bug changes.