Shibboleth and other auth modules: Difference between revisions

From VoIPmonitor.org
(Clarify: Custom login scripts cannot implement SSO protocols like Shibboleth)
(Restructure page: add TOC, use tables for clarity, fix headings hierarchy, improve AI summary, separate custom login limitations into subsection)
Line 1: Line 1:
{{DISPLAYTITLE:SSO Authentication Support}}
{{DISPLAYTITLE:SSO Authentication Support}}
__TOC__


== SSO Authentication Support in VoIPmonitor GUI ==
== Overview ==


The VoIPmonitor GUI supports Single Sign-On (SSO) authentication through specific providers.
This page documents Single Sign-On (SSO) authentication support in the VoIPmonitor GUI, including currently supported methods and available alternatives.


=== Currently Supported SSO Methods ===
== Currently Supported SSO Methods ==


* '''[[Google Sign-In (OAuth 2.0)|Google_Sign_in_usage]]''' - Fully supported and documented
{| class="wikitable"
|-
! Method !! Status !! Documentation
|-
| Google Sign-In (OAuth 2.0) || Supported || [[Google_Sign_in_usage]]
|}


=== Unsupported SSO Methods ===
== Unsupported SSO Methods ==


* '''Shibboleth''' - Not supported at this time
The following SSO methods are '''not currently supported''':
* '''SAML-based SSO''' - Not supported at this time
* '''Other IdP/LDAP SSO solutions''' - Not supported at this time


=== Future Support ===
* '''Shibboleth''' - Not supported
* '''SAML-based SSO''' - Not supported
* '''Other IdP/LDAP SSO solutions''' - Not supported


Support for additional SSO methods (including Shibboleth) is planned for a future release. Check the [[FAQ]] or release notes for updates on features under development.
Support for additional SSO methods (including Shibboleth and SAML) may be considered for future releases. Check the [[FAQ]] or release notes for updates.


=== Authentication Alternatives ===
== Authentication Alternatives ==


The VoIPmonitor GUI supports the following alternatives to SSO:
If your required SSO method is not supported, the VoIPmonitor GUI offers these alternatives:


* '''Local user accounts''' - Standard username/password authentication
{| class="wikitable"
* '''Two Factor Authentication (2FA)''' - See [[2FA]]
|-
* '''Web server authentication''' - Apache Basic Auth or similar (not SSO)
! Method !! Description !! Documentation
* '''Custom login scripts''' - For integrating with authentication systems where the web server has already authenticated the user (e.g., LDAP via mod_authnz_ldap). See [[WEB_API#Custom_Login]]. Note: Custom login scripts can only integrate with systems that use standard HTTP authentication headers - they cannot implement SSO protocols like Shibboleth or SAML.
|-
| Local user accounts || Standard username/password authentication || Built-in
|-
| Two-Factor Authentication (2FA) || Additional security layer for local accounts || [[2FA]]
|-
| Web server authentication || Apache Basic Auth, Digest Auth, or similar || Server configuration
|-
| Custom login scripts || Integration with pre-authenticated sessions || [[WEB_API#Custom_Login]]
|}


=== AI Summary for RAG ===
=== Custom Login Scripts Limitations ===


'''Summary:''' This page clarifies which SSO authentication methods are supported in VoIPmonitor GUI. Only Google Sign-In is currently supported. Shibboleth and other SSO methods are not supported and are planned for future release.
Custom login scripts can integrate with authentication systems where the web server has already authenticated the user (e.g., LDAP via <code>mod_authnz_ldap</code>). However, they have the following limitations:


'''Keywords:''' SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, unsupported, SAML
* Can only work with systems using standard HTTP authentication headers
* '''Cannot''' implement SSO protocols like Shibboleth or SAML
* Require the web server to handle the actual authentication
 
== See Also ==
 
* [[Google_Sign_in_usage]] - Google OAuth 2.0 setup guide
* [[2FA]] - Two-Factor Authentication configuration
* [[WEB_API#Custom_Login]] - Custom login script documentation
* [[FAQ]] - Frequently Asked Questions
 
== AI Summary for RAG ==
 
'''Summary:''' This page documents SSO authentication support in VoIPmonitor GUI. Currently, only Google Sign-In (OAuth 2.0) is supported. Shibboleth, SAML, and other SSO methods are not supported. Alternatives include local accounts, 2FA, web server authentication, and custom login scripts (which cannot implement SSO protocols).
 
'''Keywords:''' SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, SAML, unsupported, 2FA, custom login


'''Key Questions:'''
'''Key Questions:'''
* Which SSO methods are currently supported in VoIPmonitor GUI?
* Which SSO methods are supported in VoIPmonitor GUI?
* Is Shibboleth authentication supported in VoIPmonitor?
* Is Shibboleth authentication supported?
* What is the current status of SSO support in VoIPmonitor?
* Is SAML-based SSO supported?
* Is Google Sign-In available for VoIPmonitor GUI?
* What alternatives exist if my SSO method is not supported?
* Can I use custom login scripts to implement Shibboleth?
* Can custom login scripts implement Shibboleth or SAML?

Revision as of 20:29, 4 January 2026

Overview

This page documents Single Sign-On (SSO) authentication support in the VoIPmonitor GUI, including currently supported methods and available alternatives.

Currently Supported SSO Methods

Method Status Documentation
Google Sign-In (OAuth 2.0) Supported Google_Sign_in_usage

Unsupported SSO Methods

The following SSO methods are not currently supported:

  • Shibboleth - Not supported
  • SAML-based SSO - Not supported
  • Other IdP/LDAP SSO solutions - Not supported

Support for additional SSO methods (including Shibboleth and SAML) may be considered for future releases. Check the FAQ or release notes for updates.

Authentication Alternatives

If your required SSO method is not supported, the VoIPmonitor GUI offers these alternatives:

Method Description Documentation
Local user accounts Standard username/password authentication Built-in
Two-Factor Authentication (2FA) Additional security layer for local accounts 2FA
Web server authentication Apache Basic Auth, Digest Auth, or similar Server configuration
Custom login scripts Integration with pre-authenticated sessions WEB_API#Custom_Login

Custom Login Scripts Limitations

Custom login scripts can integrate with authentication systems where the web server has already authenticated the user (e.g., LDAP via mod_authnz_ldap). However, they have the following limitations:

  • Can only work with systems using standard HTTP authentication headers
  • Cannot implement SSO protocols like Shibboleth or SAML
  • Require the web server to handle the actual authentication

See Also

AI Summary for RAG

Summary: This page documents SSO authentication support in VoIPmonitor GUI. Currently, only Google Sign-In (OAuth 2.0) is supported. Shibboleth, SAML, and other SSO methods are not supported. Alternatives include local accounts, 2FA, web server authentication, and custom login scripts (which cannot implement SSO protocols).

Keywords: SSO, single sign-on, authentication, Google Sign-In, OAuth, Shibboleth, LDAP, SAML, unsupported, 2FA, custom login

Key Questions:

  • Which SSO methods are supported in VoIPmonitor GUI?
  • Is Shibboleth authentication supported?
  • Is SAML-based SSO supported?
  • What alternatives exist if my SSO method is not supported?
  • Can custom login scripts implement Shibboleth or SAML?
Retrieved from "https://www.voipmonitor.org/doc/index.php?title=Shibboleth_and_other_auth_modules&oldid=6595"