https://github.com/cesnet/ansible-role-shibboleth-sp
Ansible role to install and configure shibboleth
https://github.com/cesnet/ansible-role-shibboleth-sp
Last synced: 4 months ago
JSON representation
Ansible role to install and configure shibboleth
- Host: GitHub
- URL: https://github.com/cesnet/ansible-role-shibboleth-sp
- Owner: CESNET
- License: apache-2.0
- Created: 2019-10-07T07:28:33.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2023-11-07T15:18:52.000Z (over 2 years ago)
- Last Synced: 2026-01-12T23:32:13.005Z (5 months ago)
- Language: HTML
- Size: 14.6 KB
- Stars: 1
- Watchers: 7
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ansible-role-shibboleth
Ansible galaxy role cesnet.shibboleth_sp that install and configure shibboleth SP
## Requirements
## Role variables
* shibboleth_hostname - Specify the hostname
* shibboleth_sp_entity_id - Specify the entityId of Service provider
###### Followed options are only for the default attribute_map.xml template
* shibboleth_template_attribute_map_allow_urn_oid_attributes - Specify if default urn:oid attributes will be added to attribute map or not
* shibboleth_template_attribute_map_allow_urn_mace_attributes - Specify if default urn:mace attributes will be added to attribute map or not
* shibboleth_template_attribute_map_allow_schac_attributes - Specify if default schac attributes will be added to attribute map or not
* shibboleth_template_attribute_map_custom_attributes - Specify the custom attributes that will be added to attribute map
* Example of structure:
```
shibboleth_template_attribute_map_custom_attributes:
- id: attributeId (REQUIRED)
name: attributeName (REQUIRED)
comment: Commnent (OPTIONAL)
decoder: (OPTIPNAL)
type: Decoder_type (REQUIRED if decoder is filled)
```
###### Change these options only if you use the default shibboleth2.xml template
* shibboleth_template_sp_entity_id - Specify the entityId of Service provider
* shibboleth_template_remote_users - Specify the list of allowed items in REMOTE_USER
* shibboleth_template_attribute_prefix - Specify the attribute prefix
* shibboleth_template_idp_entity_id - Specify the entityId of Identity provider
* shibboleth_template_metadata_url - Specify the URL where the IdP metadata is available
* shibboleth_template_metadata_backup_file - Specify the name of backup file for metadata
## Available tags
* install
* configuration
* start
* stop
## Example playbook
```
- hosts: all
remote_user: root
vars:
shibboleth_hostname: "sp.example.org"
shibboleth_sp_entity_id: "https://{{ shibboleth_hostname }}/shibboleth"
shibboleth_template_attribute_map_allow_urn_oid_attributes: true
shibboleth_template_attribute_map_allow_urn_mace_attributes: true
shibboleth_template_attribute_map_allow_schac_attributes: true
shibboleth_template_attribute_map_custom_attributes: []
shibboleth_template_sp_entity_id: "https://{{ shibboleth_hostname }}/shibboleth"
shibboleth_template_remote_users:
- eppn
shibboleth_template_attribute_prefix: "AJP_"
shibboleth_template_idp_entity_id: "https://idp.example.org/idp/shibboleth"
shibboleth_template_metadata_url: "http://federation.org/federation-metadata.xml"
shibboleth_template_metadata_backup_file: "metadata.xml"
roles:
- cesmet.shibboleth_sp
```