Skip to content
Snippets Groups Projects
Commit 159bc555 authored by Andreas Åkre Solberg's avatar Andreas Åkre Solberg
Browse files

Moved and translated the infocard documentation to markdown syntax. 

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1079 44740490-163a-0410-bde0-09ae8108e29a
parent c16b9673
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
modules/InfoCard/README.txt deleted 100644 → 0
+ 0
− 77
View file @ c16b9673
/*
* AUTHOR: Samuel Muñoz Hidalgo
* EMAIL: samuel.mh@gmail.com
* LAST REVISION: 22-DEC-08
* DESCRIPTION: What you should read before starting doing things.
*/
WARNING: THIS IS NOT mature software, it's released with testing, educational, developing purposes. It's on a very early version, so don't rely the life of anybody on it.
------------ INFORMATION CARDS MODULE FOR SIMPLESAMLPHP -----------------------
INTRODUCTION:
This is a simpleSAMLphp module that works with Information Cards techcnologies and provides two basic functionalities:
-RP
Acting as a Relying Party, you can accept user authentication through InfoCards comsumming tokens sent by aSTS.
-STS
Acting as a Secure Token Service you can provide information to a RP generating tokens. Currently, only user-password authentication is supported.
-InfoCard Generator
Your users could request their InfoCard filling a form with their username and password.
VERY IMPORTANT:
This document is not a strict guide, I mean it might have some errors or missed information. I've tried to comment almost every trick i've used to make the system work and make your life easier. So, if at any point of the installation you feel lost, breathe twice, think for ten minutes in what you are trying to do, read again the documentation and use your common sense. It'll be usefull when you'll face again the configuration file.
BASIC INSTALLATION:
1. Copy the InfoCard folder in your modules directoy in your SimpleSAMLphp installation directory.
2. Copy (or move) the file modules/InfoCard/extra/config-login-infocard.php to the config directory in your SimpleSAMLphp installation directory.
3. Edit the config/config-login-infocard.php file, you should configure some values like: help_desk_email_URL, contact_info_URL, server_key, server_crt, sts_crt, requiredClaims and optionalClaims to feet your needs.
4. Edit the config/authsources.php file, add this text before the last );
'InfoCard' => array(
'InfoCard:ICAuth',
),
5. That's all.
ADDING AND INFOCARD GENERATOR:
1. Go into the modules/InfoCard folder.
2. Copy extra/getinfocard.php to www/getinfocard.php
3. Edit the config/config-login-infocard.php file and uncomment this line
// 'CardGenerator' => 'getinfocard.php', (delete the two //).
4. Following the previous example, uncomment this values:certificates, sts_key, tokenserviceurl and mexurl.
6. Check the previous values andm modify them if you need.
5. Read the USER FUNCTIONS section.
ADDING THE STS FUNCTIONALITY
1. Go into the modules/InfoCard folder.
2. Copy extra/mex.php and extra/tokenservice.php to the www folder.
3. Edit the config/config-login-infocard.php file and uncomment the values: certificates and sts_key.
4. Read the USER FUNCTIONS section.
USER FUNCTIONS
Because there are many authentication issues I cannot guess for you, you'll have to code a little bit to fit this module to your authentication system.
We we'll work with the file UserFunctions.php located in modules/InfoCard/lib/
validateUser, it receives two strings, username and password, you do the validation (against your database?) and return true if you want to validate the user or false instead.
fillClaims, it's used by the tokenservice to give information about the user to the relying party. It receives the username, the configured required and optional claims and the claims requested by the RP.
It works filling the claimValues array and your job is the ensure the 'value' variable ($claimValues[$claim]['value']= ) of the array gets the value you want. Understand that requested values and your configured ones could not match.
fillICdata, it's used by the card generator to retrieve needed information. It receives an authenticated username and returns an array containing information such as the card name, the card image, the expiring time, etc.
CERTIFICATES AND HOSTS
The architecture is composed by three independent elements:
-User: Identity Selector
-IDP: Relying Party
-STS: IC and token generation.
That's because you should configure two hosts (with two x509 certificates) if you want two have the IDP and STS functionalities in the same machine.
\ No newline at end of file
modules/InfoCard/docs/usage.txt 0 → 100644
+ 100
− 0
View file @ 159bc555
Information cards module for simpleSAMLphp
==========================================
<!--
This file is written in Markdown syntax.
For more information about how to use the Markdown syntax, read here:
http://daringfireball.net/projects/markdown/syntax
-->
AUTHOR: Samuel Muñoz Hidalgo
EMAIL: samuel.mh@gmail.com
LAST REVISION: 22-DEC-08
DESCRIPTION: What you should read before starting doing things.
INTRODUCTION
-------------
WARNING: **THIS IS NOT** mature software, it's released with testing, educational, developing purposes. It's on a very early version, so don't rely the life of anybody on it.
This is a simpleSAMLphp module that works with Information Cards techcnologies and provides two basic functionalities:
RP
: Acting as a Relying Party, you can accept user authentication through InfoCards comsumming tokens sent by aSTS.
STS
: Acting as a Secure Token Service you can provide information to a RP generating tokens. Currently, only user-password authentication is supported.
InfoCard Generator
: Your users could request their InfoCard filling a form with their username and password.
VERY IMPORTANT
--------------
This document is not a strict guide, I mean it might have some errors or missed information. I've tried to comment almost every trick i've used to make the system work and make your life easier. So, if at any point of the installation you feel lost, breathe twice, think for ten minutes in what you are trying to do, read again the documentation and use your common sense. It'll be usefull when you'll face again the configuration file.
Basic installation
------------------
1. Copy the InfoCard folder in your modules directoy in your SimpleSAMLphp installation directory.
2. Copy (or move) the file `modules/InfoCard/extra/config-login-infocard.php` to the config directory in your SimpleSAMLphp installation directory.
3. Edit the `config/config-login-infocard.php` file, you should configure some values like: `help_desk_email_URL`, `contact_info_URL`, `server_key`, `server_crt`, `sts_crt`, `requiredClaims` and `optionalClaims` to fit your needs.
4. Edit the config/authsources.php file, add this text before the last );
'InfoCard' => array(
'InfoCard:ICAuth',
),
5. That's all.
Adding an Infocard Generator
----------------------------
1. Go into the `modules/InfoCard` folder.
2. Copy `extra/getinfocard.php` to `www/getinfocard.php`
3. Edit the `config/config-login-infocard.php` file and uncomment this line
// 'CardGenerator' => 'getinfocard.php', (delete the two //).
4. Following the previous example, uncomment this `values:certificates`, `sts_key`, `tokenserviceurl` and `mexurl`.
6. Check the previous values andm modify them if you need.
5. Read the USER FUNCTIONS section.
ADDING THE STS FUNCTIONALITY
----------------------------
1. Go into the `modules/InfoCard` folder.
2. Copy `extra/mex.php` and `extra/tokenservice.php` to the www folder.
3. Edit the `config/config-login-infocard.php` file and uncomment the values: `certificates` and `sts_key`.
4. Read the USER FUNCTIONS section.
USER FUNCTIONS
--------------
Because there are many authentication issues I cannot guess for you, you'll have to code a little bit to fit this module to your authentication system.
We we'll work with the file `UserFunctions.php` located in `modules/InfoCard/lib/`
`validateUser`, it receives two strings, username and password, you do the validation (against your database?) and return true if you want to validate the user or false instead.
`fillClaims`, it's used by the tokenservice to give information about the user to the relying party. It receives the username, the configured required and optional claims and the claims requested by the RP.
It works filling the claimValues array and your job is the ensure the 'value' variable (`$claimValues[$claim]['value']=` ) of the array gets the value you want. Understand that requested values and your configured ones could not match.
`fillICdata`, it's used by the card generator to retrieve needed information. It receives an authenticated username and returns an array containing information such as the card name, the card image, the expiring time, etc.
CERTIFICATES AND HOSTS
----------------------
The architecture is composed by three independent elements:
- User: Identity Selector
- IDP: Relying Party
- STS: IC and token generation.
That's because you should configure two hosts (with two x509 certificates) if you want two have the IDP and STS functionalities in the same machine.
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment