MAN page from OpenSuSE perl-OpenXPKI-Core-0.9.1389-6.362.CS.i586.rpm

OpenXPKI::Server::Authentication::ClientSSO

Section: User Contributed Perl Documentation (3)
Updated: 2008-09-30
Index

Name

OpenXPKI::Server::Authentication::ClientSSO - support for client based SSO.

Description

This is the class which supports OpenXPKI with an authentication methodvia an SSO mechanism on the client side of the daemon. This can be for examplean installed Shibboleth system on the web server. Please notice that you musttrust the web server in this case. The parameters are passed as a hash reference.

Functions

new

is inherited from OpenXPKI::Server::Authentication::External

login

returns (user, role, service ready message) triple if login wassuccessful, (undef, undef, {}) otherwise. The message whichis supplied as a parameter to the function should contain at minimumLOGIN as parameter. You can supply this module with preconfiguredrole from the client SSO via the parameter pseudo_role. Thisparameter can be processed on the server side via a regex ora command to check its sanity.

It is higly recommended to take a look at the source code ofthis module before you blindly trust a client's SSO mechanism.Additionally you have to understand that the server in thiscase must trust the client or the wrapper around the client.

This document was created byman2html,using the manual pages.