README.md in omniauth-shibboleth-1.0.4 vs README.md in omniauth-shibboleth-1.0.5

- old
+ new

@@ -18,18 +18,16 @@ ## Getting Started ### Installation - % gem install omniauth % gem install omniauth-shibboleth ### Setup Gemfile % cd rails-app % vi Gemfile - gem 'omniauth' gem 'omniauth-shibboleth' ### Setup Shibboleth Strategy To use OmniAuth Shibboleth strategy as a middleware in your rails application, add the following file to your rails application initializer directory. @@ -72,12 +70,16 @@ AuthType shibboleth ShibRequestSetting requireSession 1 require valid-user </Location> -Shibboleth strategy just checks the existence of Shib-Session-ID or Shib-Application-ID. +Shibboleth strategy just checks the existence of Shib-Session-ID or Shib-Application-ID. +If you want to use omniauth-shibboleth without Apache or IIS, you can try **rack-saml**. It supports a part of Shibboleth SP functions. + +https://github.com/toyokazu/rack-saml + Shibboleth strategy assumes the attributes are provided via environment variables because the use of ShibUseHeaders option may cause some problems. The details are discussed in the following page: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSpoofChecking To provide Shibboleth attributes via environment variables, we can not use proxy_balancer base approach. Currently we can realize it by using Phusion Passenger as an application container. An example construction pattern is shown in presence_checker application (https://github.com/toyokazu/presence_checker/). @@ -89,10 +91,10 @@ % vi config/initializer/omniauth.rb Rails.application.config.middleware.use OmniAuth::Builder do provider :shibboleth, { :dev_mode => true } end -## License +## License (MIT License) Copyright (C) 2011 by Toyokazu Akiyama. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal