forked from tschikarski/shibboleth
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ext_conf_template.txt
36 lines (36 loc) · 4.13 KB
/
ext_conf_template.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
# cat=General/enable/010; type=string; label=Path to field mapping config file: Path from TYPO3 root directory pointing to text file mit typoscript-like configuration containing field mappings. ATTENTION: This file is crucial for allowing / disallowing Shibboleth users into FE, BE, groups etc.
mappingConfigPath = /typo3conf/ext/shibboleth/Resources/Private/config.txt
# cat=General/enable/020; type=string; label=URL of Shibboleth handler: See your shibboleth xml config file (shibboleth2.xml): attribute "handlerURL" of tag "Sessions"; no leading slash!
sessions_handlerURL = Shibboleth.sso
# cat=General/enable/030; type=string; label=Location of Shibboleth Session Initiator: See your shibboleth xml config file (shibboleth2.xml): attribute "Location" of tag "SessionInitiator"; with leading slash!
sessionInitiator_Location = /Login
# cat=FE authentication/enable/035; type=boolean; label=Enable Shibboleth for FE: ATTENTION! Take care to disable all imported Shibboleth users, when deactivating this or uninstalling the extension!
FE_enable = 0
# cat=FE authentication/enable/040; type=boolean; label=FE User Autoimport: Check this to enable automatic import of authenticated Shibboleth users as FE users
FE_autoImport = 0
# cat=FE authentication/enable/050; type=int; label=FE User Autoimport to pid: Page ID of the (sys)folder automatic imported FE users shall go into
FE_autoImport_pid =
# cat=BE authentication/enable/055; type=boolean; label=Enable Shibboleth for BE: ATTENTION! Take care to disable all imported Shibboleth users, when deactivating this or uninstalling the extension!
BE_enable = 0
# cat=BE authentication/enable/060; type=boolean; label=BE User Autoimport: Check this to enable automatic import of authenticated Shibboleth users as BE users
BE_autoImport = 0
# cat=BE authentication/enable/070; type=boolean; label=BE User Autoimport in Disabled State: If this is checked and BE Autoimport is enabled, new BE users start in disabled state
BE_autoImportDisableUser = 1
# cat=BE authentication/enable/190; type=string; label=Custom BE login page, template path:Specify a path relative to the site root (e.g. fileadmin/my_templates/login.html) with a custom HTML template. The default template is typo3/sysext/t3skin/Resources/Private/Templates/login.html.
BE_loginTemplatePath =typo3conf/ext/shibboleth/Resources/Private/Templates/BeForm/login.html
# cat=BE authentication/enable/210; type=string; label=Redirect after logout: User will be redirected to this URL after backend logout. This avoids re-login to the backend. No redirect, if empty. Since ver. 3.0.4 it is no more necessary to prefix the target with /Shibboleth.sso/Logout?return=
BE_logoutRedirectUrl =/typo3conf/ext/shibboleth/Resources/Public/LogoutPages/logout.html
# cat=BE authentication/enable/220; type=string; label=Optional redirect URL for valid users who still need to be enabled by admin manually
BE_disabledUserRedirectUrl = /typo3conf/ext/shibboleth/Resources/Public/LogoutPages/nologinyet.html
# cat=Advanced/enable/110; type=boolean; label=Enable alwaysFetchUser: Detects a local Shibboleth session at any circumstances. If not a performance issue, leave this on in normal circumstances.
enableAlwaysFetchUser = 1
# cat=Advanced/enable/120; type=string; label=entityID of your IdP: Can be used to overwrite any discovery method defined in your shibboleth config file (shibboleth2.xml)
entityID=
# cat=Advanced/enable/130; type=boolean; label=Force SSL (recommended): Check to enforce using SSL for connection to the local Shibboleth handlers, even if the application is used without SSL
forceSSL = 1
# cat=Advanced/enable/150; type=string; label=FE Application-ID (optional): Compare Shibboleth Application-ID with this string, if not empty
FE_applicationID =
# cat=Advanced/enable/170; type=string; label=BE Application-ID (optional): Compare Shibboleth Application-ID with this string, if not empty
BE_applicationID =
# cat=Debugging/enable/210; type=boolean; label=Activate extra devLog'ging for FE/BE: Include information on DB operations. Note that general activation of devlog requires to set [SYS][enable_DLOG] to true.
database_devLog = 0