Shibboleth and other auth modules: Difference between revisions

From VoIPmonitor.org
(Correct documentation: Shibboleth is NOT supported, only Google Sign-In is available)
(Clarify: Custom login scripts cannot implement SSO protocols like Shibboleth)
Line 7: Line 7:
=== Currently Supported SSO Methods ===
=== Currently Supported SSO Methods ===


* '''[[Google_Sign_in_usage|Google Sign-In (OAuth 2.0)]]''' - Fully supported and documented
* '''[[Google Sign-In (OAuth 2.0)|Google_Sign_in_usage]]''' - Fully supported and documented


=== Unsupported SSO Methods ===
=== Unsupported SSO Methods ===
Line 13: Line 13:
* '''Shibboleth''' - Not supported at this time
* '''Shibboleth''' - Not supported at this time
* '''SAML-based SSO''' - Not supported at this time
* '''SAML-based SSO''' - Not supported at this time
* '''LDAP''' - Direct LDAP integration is not supported (use custom login script instead)
* '''Other IdP/LDAP SSO solutions''' - Not supported at this time


=== Future Support ===
=== Future Support ===


Support for additional SSO methods (including Shibboleth) is planned for a future release. Check the [[FAQ|FAQ]] or release notes for updates on features under development.
Support for additional SSO methods (including Shibboleth) is planned for a future release. Check the [[FAQ]] or release notes for updates on features under development.


=== Alternative: Custom Login Scripts ===
=== Authentication Alternatives ===


If you need to integrate with an authentication system not natively supported (such as LDAP, Shibboleth, or custom SSO), you can implement a '''custom login script''' using the [[WEB_API#Custom_Login|Web API]].
The VoIPmonitor GUI supports the following alternatives to SSO:


For LDAP examples, see the `scripts/ldap_custom_login_example.php` file in your GUI directory.
* '''Local user accounts''' - Standard username/password authentication
* '''Two Factor Authentication (2FA)''' - See [[2FA]]
* '''Web server authentication''' - Apache Basic Auth or similar (not SSO)
* '''Custom login scripts''' - For integrating with authentication systems where the web server has already authenticated the user (e.g., LDAP via mod_authnz_ldap). See [[WEB_API#Custom_Login]]. Note: Custom login scripts can only integrate with systems that use standard HTTP authentication headers - they cannot implement SSO protocols like Shibboleth or SAML.


=== AI Summary for RAG ===
=== AI Summary for RAG ===


'''Summary:''' This page clarifies which SSO authentication methods are supported in VoIPmonitor GUI, which are not, and alternatives for custom authentication integration.
'''Summary:''' This page clarifies which SSO authentication methods are supported in VoIPmonitor GUI. Only Google Sign-In is currently supported. Shibboleth and other SSO methods are not supported and are planned for future release.


'''Keywords:''' SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, custom login, unsupported
'''Keywords:''' SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, unsupported, SAML


'''Key Questions:'''
'''Key Questions:'''
* Which SSO methods are currently supported in VoIPmonitor GUI?
* Which SSO methods are currently supported in VoIPmonitor GUI?
* Is Shibboleth authentication supported in VoIPmonitor?
* Is Shibboleth authentication supported in VoIPmonitor?
* How can I integrate VoIPmonitor with LDAP or other unsupported auth methods?
* What is the current status of SSO support in VoIPmonitor?
* What is the current status of SSO support in VoIPmonitor?
* Is Google Sign-In available for VoIPmonitor GUI?
* Is Google Sign-In available for VoIPmonitor GUI?
* Can I use custom login scripts to implement Shibboleth?

Revision as of 08:54, 4 January 2026


SSO Authentication Support in VoIPmonitor GUI

The VoIPmonitor GUI supports Single Sign-On (SSO) authentication through specific providers.

Currently Supported SSO Methods

Unsupported SSO Methods

  • Shibboleth - Not supported at this time
  • SAML-based SSO - Not supported at this time
  • Other IdP/LDAP SSO solutions - Not supported at this time

Future Support

Support for additional SSO methods (including Shibboleth) is planned for a future release. Check the FAQ or release notes for updates on features under development.

Authentication Alternatives

The VoIPmonitor GUI supports the following alternatives to SSO:

  • Local user accounts - Standard username/password authentication
  • Two Factor Authentication (2FA) - See 2FA
  • Web server authentication - Apache Basic Auth or similar (not SSO)
  • Custom login scripts - For integrating with authentication systems where the web server has already authenticated the user (e.g., LDAP via mod_authnz_ldap). See WEB_API#Custom_Login. Note: Custom login scripts can only integrate with systems that use standard HTTP authentication headers - they cannot implement SSO protocols like Shibboleth or SAML.

AI Summary for RAG

Summary: This page clarifies which SSO authentication methods are supported in VoIPmonitor GUI. Only Google Sign-In is currently supported. Shibboleth and other SSO methods are not supported and are planned for future release.

Keywords: SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, unsupported, SAML

Key Questions:

  • Which SSO methods are currently supported in VoIPmonitor GUI?
  • Is Shibboleth authentication supported in VoIPmonitor?
  • What is the current status of SSO support in VoIPmonitor?
  • Is Google Sign-In available for VoIPmonitor GUI?
  • Can I use custom login scripts to implement Shibboleth?