-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
We need to install and run our Shibboleth Service Provider (SP) in the new ECS cluster.
IAS noted that we will need to use LetsEncrypt (they have an example script) for this.
- We need to create a Docker image that includes apache httpd along with the shibboleth service
- Update the ALB listener rules to send SSO traffic to shibboleth
- Update the ECS cluster CF templates to include the new shibboleth service
- Update the backend to store a User's shibboleth eppn as well as a ROR's entityID
- Update the frontend application to provide a way for users to enter into the SSO workflow when creating an account, or signing in
Will create individual tickets for the backend and frontend work once we get closer