Forums | Mahara Community
SSO (Shibboleth) login with app
29 June 2017, 2:39 AM
I couldn't find any info on this anywhere.
My users are using the Shibboleth authentication method (https://wiki.mahara.org/wiki/Plugins/Auth/Shibboleth). How are they supposed to log in with the mobile app? I could see from Kristina's answer on a slightly different question to https://mahara.org/interaction/forum/topic.php?id=7853 that users could manually create an app token and enter it in the mobile app, but this is tedious.
However, I noticed that when you first login with the Mobile app there are buttons for "paste token" and "local login". What would I need to add to the Shibboleth auth plugin to have it supported in the mobile app ? I couldn't find any information on the Dev wiki.
29 June 2017, 4:37 AM
Because the token contains many letters I use the browser to log in to mahara.
After logging in you have to
1. click on "Einstellungen" and then on Apps
2. then you can generate a token and you can copy it from the browser
3. No change to the mahara app and choose "Login with token"
4. Now paste the token from the browser to the mahara app an log in
29 June 2017, 6:35 PM
Thanks, but I was trying to avoid having to ask users to copy-paste tokens.
29 June 2017, 3:48 PM
If you set up SAML SSO properly, you should see the "Single sign-on" button right above the "Local login" one. Only accounts that require MNet and LTI and are not tied to another authentication method need to set up a token manually.
See http://manual.mahara.org/en/17.04/misc/mobile.html#connect-mahara-mobile-to-your-account for what it should look like on your screen.
29 June 2017, 6:35 PM
Thanks for your reply. I don't have SAML SSO set up – only the Shibboleth authentication plugin. Does this mean that I have to configure the SAML plugin on top of that ?
Would it not be possible to add support for the Shibboleth authentication in the mobile app ?
29 June 2017, 9:57 PM
Oh you have a third-party plugin. That may not have the hooks that the built-in plugins have. You should be able to set up the authentication for Shibboleth using the built-in SAML authentication plugin. We use that successfully for at least one of our clients with their Shibboleth setup.
30 June 2017, 9:58 PM
Oh, alright. I'll try to set things up using the SAML plugin. Thanks!