The following entries in the configuration file of PowerFolder control the setup of user authentication via Shibboleth. Once activated Shibboleth authentication is available for web, client and mobile app usage of PowerFolder.
Shibboleth authentication can be combined with other methods of authentication such as database, LDAP or RADIUS.
Activate Shibboleth
security.auth.order=shibboleth,database
Service Provider URL
shibboleth.serviceprovider.url=https://powerfolder.organization.net/login/shibboleth
XML URL of Federation Metadaten
shibboleth.metadata.url=https://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Test-metadata.xml
Merge accounts by email addresses
shibboleth.accounts.match_email=true
Create organizations automatically
shibboleth.create.organizations=true
shibboleth.organizations.attribute=o
Entitlement check
shibboleth.entitlement=http://idm.org/entitlement/organization-PowerFolder