Forums | Mahara Community

Support /
SSO (Shibboleth) login with app


Nicolas Dunand's profile picture
Posts: 11

29 June 2017, 2:39 AM

Hello,

I couldn't find any info on this anywhere.

My users are using the Shibboleth authentication method (https://wiki.mahara.org/wiki/Plugins/Auth/Shibboleth). How are they supposed to log in with the mobile app? I could see from Kristina's answer on a slightly different question to https://mahara.org/interaction/forum/topic.php?id=7853 that users could manually create an app token and enter it in the mobile app, but this is tedious.

However, I noticed that when you first login with the Mobile app there are buttons for "paste token" and "local login". What would I need to add to the Shibboleth auth plugin to have it supported in the mobile app ? I couldn't find any information on the Dev wiki.

 

Thanks,

Nicolas

29 June 2017, 4:37 AM

 

token.png

 

Because the token contains many letters I use the browser to log in to mahara.

After logging in you have to

1. click on "Einstellungen" and then on Apps

2. then you can generate a token and you can copy it from the browser

3. No change to the mahara app and choose "Login with token"

4. Now paste the token from the browser to the mahara app an log in

 

 

Nicolas Dunand's profile picture
Posts: 11

29 June 2017, 6:35 PM

Hi Andreas,

Thanks, but I was trying to avoid having to ask users to copy-paste tokens.

Kristina Hoeppner's profile picture
Posts: 3395

29 June 2017, 3:48 PM

Hello Nicolas,

If you set up SAML SSO properly, you should see the "Single sign-on" button right above the "Local login" one. Only accounts that require MNet and LTI and are not tied to another authentication method need to set up a token manually.

See http://manual.mahara.org/en/17.04/misc/mobile.html#connect-mahara-mobile-to-your-account for what it should look like on your screen.

Cheers

Kristina

 

Nicolas Dunand's profile picture
Posts: 11

29 June 2017, 6:35 PM

Hello Kristina,

Thanks for your reply. I don't have SAML SSO set up – only the Shibboleth authentication plugin. Does this mean that I have to configure the SAML plugin on top of that ?

Would it not be possible to add support for the Shibboleth authentication in the mobile app ?

Kristina Hoeppner's profile picture
Posts: 3395

29 June 2017, 9:57 PM

Hello Nicolas,

Oh you have a third-party plugin. That may not have the hooks that the built-in plugins have. You should be able to set up the authentication for Shibboleth using the built-in SAML authentication plugin. We use that successfully for at least one of our clients with their Shibboleth setup.

Cheers

Kristina

 

Nicolas Dunand's profile picture
Posts: 11

30 June 2017, 9:58 PM

Hello Kristina,

Oh, alright. I'll try to set things up using the SAML plugin. Thanks!

 

Nicolas

7 results