README.md in omniauth-shibboleth-1.0.4 vs README.md in omniauth-shibboleth-1.0.5
- old
+ new
@@ -18,18 +18,16 @@
## Getting Started
### Installation
- % gem install omniauth
% gem install omniauth-shibboleth
### Setup Gemfile
% cd rails-app
% vi Gemfile
- gem 'omniauth'
gem 'omniauth-shibboleth'
### Setup Shibboleth Strategy
To use OmniAuth Shibboleth strategy as a middleware in your rails application, add the following file to your rails application initializer directory.
@@ -72,12 +70,16 @@
AuthType shibboleth
ShibRequestSetting requireSession 1
require valid-user
</Location>
-Shibboleth strategy just checks the existence of Shib-Session-ID or Shib-Application-ID.
+Shibboleth strategy just checks the existence of Shib-Session-ID or Shib-Application-ID.
+If you want to use omniauth-shibboleth without Apache or IIS, you can try **rack-saml**. It supports a part of Shibboleth SP functions.
+
+https://github.com/toyokazu/rack-saml
+
Shibboleth strategy assumes the attributes are provided via environment variables because the use of ShibUseHeaders option may cause some problems. The details are discussed in the following page:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSpoofChecking
To provide Shibboleth attributes via environment variables, we can not use proxy_balancer base approach. Currently we can realize it by using Phusion Passenger as an application container. An example construction pattern is shown in presence_checker application (https://github.com/toyokazu/presence_checker/).
@@ -89,10 +91,10 @@
% vi config/initializer/omniauth.rb
Rails.application.config.middleware.use OmniAuth::Builder do
provider :shibboleth, { :dev_mode => true }
end
-## License
+## License (MIT License)
Copyright (C) 2011 by Toyokazu Akiyama.
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal