airavata-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marcus Christie (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRAVATA-2582) CILogon: support direct redirects to institutional logins
Date Fri, 03 Nov 2017 20:48:00 GMT

    [ https://issues.apache.org/jira/browse/AIRAVATA-2582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16238342#comment-16238342
] 

Marcus Christie commented on AIRAVATA-2582:
-------------------------------------------

Some information from Terry Fleury:

{quote}
Hi Marcus,

I'm glad to hear that CILogon is working for you.

It is possible to redirect to a specific IdP using a specialized skin.
However, there is a reason that the CILogon Identity Provider page is
displayed to the user: the page acts as the Attribute Release Consent
screen which lets the user know what attributes will be released to your
portal.

You may have seen text at the top of the CILogon page similar to the
following:

------------------------

"Example Portal" requests access to the following information. If you do
not approve this request, do not proceed.

* Your CILogon username
* Your name
* Your email address
* Your username and affiliation from your identity provider
* A certificate that allows "Example Portal" to act on your behalf
------------------------

(Note that the number of bullet points will vary depending on the scopes
requested by your OAuth2 client.)

In order to bypass this Consent page, CILogon staff will need to verify
that your Portal site displays similar information to the user before
redirection to the IU Identity Provider. Then we can add your portal's
callback uri(s) to a whitelist for the 'bypass' skin.

We had previously created a skin named 'iugateway' which automatically
redirected to the IU IdP. The two portals currently whitelisted to use
the 'iugateway' skin are:

https://cybergateway.uits.iu.edu/
https://iub.globusonline.org/

We can add other portals / callback uris if they show an Attribute
Release Consent screen to the user.

Hope that helps.

-Terry

{quote}

> CILogon: support direct redirects to institutional logins
> ---------------------------------------------------------
>
>                 Key: AIRAVATA-2582
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2582
>             Project: Airavata
>          Issue Type: Bug
>            Reporter: Marcus Christie
>            Assignee: Marcus Christie
>            Priority: Major
>




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message