New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Setup Shibboleth Service Provider (SP) #164

Open

briri opened this issue Jul 17, 2024 · 0 comments

Labels

alb CloudFormation fargate security

Collaborator

briri commented Jul 17, 2024

We need to install and run our Shibboleth Service Provider (SP) in the new ECS cluster.

IAS noted that we will need to use LetsEncrypt (they have an example script) for this.

We need to create a Docker image that includes apache httpd along with the shibboleth service
Update the ALB listener rules to send SSO traffic to shibboleth
Update the ECS cluster CF templates to include the new shibboleth service
Update the backend to store a User's shibboleth eppn as well as a ROR's entityID
Update the frontend application to provide a way for users to enter into the SSO workflow when creating an account, or signing in

Will create individual tickets for the backend and frontend work once we get closer

briri added fargate CloudFormation security alb labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment