{"id":12788,"date":"2017-11-10T09:41:17","date_gmt":"2017-11-10T08:41:17","guid":{"rendered":"https:\/\/www.univention.de\/?p=32418"},"modified":"2017-11-10T09:41:17","modified_gmt":"2017-11-10T08:41:17","slug":"integrate-sso-owncloud","status":"publish","type":"post","link":"https:\/\/owncloud.com\/de\/blogs\/integrate-sso-owncloud\/","title":{"rendered":"How to Integrate SAML Single Sign-On in ownCloud App"},"content":{"rendered":"

If you need to use various services online, which is by the way the norm, there\u2019s nothing more conventient than using single sign-on (SSO). SSO allows you to log in to all available services in a domain with one password only. UCS provides this feature via the\u00a0SAML Identity Provider since UCS 4.1<\/a>.<\/p>\n

We chose to implement SAML as the first single sign-on technology in UCS, because of its popularity in the enterprise sector, the high degree of security, and the positive experiences that we ourselves had made with SAML in the years before. Since then, a\u00a0lot of services and Univention Apps already provide a SAML service provider. Now, we are working on integrating these into the UCS Identity Provider.<\/span><\/span><\/p>\n

Today, we like to describe the configuration of the SAML integration that is required for the ownCloud Univention App. If you are absolutely new to SAML single sign-on, we suggest to read our article Brief Introduction to Single Sign-On<\/a>\u00a0first. It will give you a general understanding of the SSO concept.<\/p>\n

This SAML integration for ownCloud was realized during one of our internal Univention Hackathons<\/a> where some of us meet regularly to give exciting ideas and projects around UCS and UCS@school a go. By the way, during these hackathons many valuable apps, concepts and product features already have emerged.<\/p>\n

So, how does the SAML integration for ownCloud work and what do I have to do?<\/p>\n

Configuration of the SAML integration for ownCloud\"Graphic<\/h3>\n

For the integration we prepared a Debian package, which does all the required configuration steps when it gets installed. Basically, you only need a UCS server, which has the ownCloud app installed from the Univention App Center.<\/p>\n

The configuration of the ownCloud SAML service provider we provide is based on the official ownCloud instructions<\/a> which are using the Mod Shibboleth (mod_shib) module of the Apache HTTP server.<\/p>\n

After the package is installed, another link is added to the portal which provides the login via SAML. Note, the regular login, which uses LDAP authentication, is still usable as a fallback solution and alternative.<\/p>\n

Preconditions to observe<\/h3>\n

\"\"<\/a><\/h1>\n

Please observe was is needed before the package can be installed:<\/p>\n