Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
| Obě strany předchozí revize Předchozí verze Následující verze | Předchozí verze Následující verze Obě strany příští revize | ||
|
en:tech:wayf:sp [2017/11/07 13:19] chvojka@cesnet.cz |
en:tech:wayf:sp [2022/02/22 11:58] Jan Oppolzer [Filter generator] -Hostel |
||
|---|---|---|---|
| Řádek 50: | Řádek 50: | ||
| You can create whitelist or blacklist of IdPs per federation. It is even possible to have this whitelist or blacklist for onlz some selected federations. | You can create whitelist or blacklist of IdPs per federation. It is even possible to have this whitelist or blacklist for onlz some selected federations. | ||
| - | |||
| - | === Access for users not participating in a federation === | ||
| - | |||
| - | For users from organizations not participating in any federation a "Hostel" Identity Provider is available. Clicking "Use Hostel IdP" enables this Identity Provider where any user might create an account for free. If the Service Provider is not configured to accept Hostel, logging in using Hostel IdP is not available. Clicking "Allow Hostel registration" enables users to create an account at Hostel IdP first. | ||
| - | |||
| - | == Examples == | ||
| - | |||
| - | Example of a direct filter with Hostel IdP enabled (without account registration): | ||
| - | |||
| - | <code> | ||
| - | filter=eyAgImFsbG93SG9zdGVsIjogdHJ1ZSwgImFsbG93SG9zdGVsUmVnIjogZmFsc2V9 | ||
| - | </code> | ||
| - | |||
| - | Example of a direct filter with Hostel IdP enabled (with account registration): | ||
| - | |||
| - | <code> | ||
| - | filter=eyAgImFsbG93SG9zdGVsIjogdHJ1ZSwgImFsbG93SG9zdGVsUmVnIjogdHJ1ZX0= | ||
| - | </code> | ||
| ===== Setup ===== | ===== Setup ===== | ||
| Řádek 129: | Řádek 111: | ||
| <a href="/simplesaml/module.php/core/authenticate.php" onclick="startOverlay(event)">Log in</a> | <a href="/simplesaml/module.php/core/authenticate.php" onclick="startOverlay(event)">Log in</a> | ||
| </code> | </code> | ||
| + | |||
| + | |||
| + | ===== Return parameter check ===== | ||
| + | |||
| + | For security reasons, WAYF checks the value of the return parameter. It is the URL to which the user's browser is redirected after selecting IdP. The parameter value must match the metadata value for that SP. If different, the WAYF displays an error message and does not allow the user to continue logging on. | ||
CESNET, z. s. p. o.
Generála Píky 26
16000 Praha 6
info@cesnet.cz
Tel: +420 234 680 222
GSM: +420 602 252 531
support@cesnet.cz