This page shows how the esup-helpdesk application can be deployed with CAS, Shibboleth and application authentications.

Shibboleth

Frontal server

The Shibboleth authentication is performed by a frontal Apache proxy server with mod_shib (e.g. frontal.domain.edu). This server proxies all the requests to an application server (e.g. application.domain.edu), served by Tomcat and on which the esup-helpdesk application is installed.

<VirtualHost frontal.domain.edu:80>
    ServerName frontal.domain.edu
    VirtualDocumentRoot /data/webapps/frontal.domain.edu
    ProxyPass /esup-helpdesk ajp://application.domain.edu:8080/esup-helpdesk min=0 max=100 smax=50 ttl=10 timeout=60
    Proxypass /shibboleth !
    ProxyErrorOverride On
    ErrorDocument 403 "You are not allowed!"
    <Location ~ "/esup-helpdesk/stylesheets/shibboleth.faces">
        AuthType shibboleth
        ShibRequireSession On
        require valid-user
    </Location>
</VirtualHost>

CAS

Application server until version 3.29.11

The configuration of esup-helpdesk on the application server is:

...

auth.useCas=true
auth.useShibboleth=true
auth.useApplication=true
cas.url=https://cas.domain.edu
app.servletUrl=http://frontal.domain.edu/esup-helpdesk

Application server from version 3.30

The configuration of esup-helpdesk on the application server is:

...