summaryrefslogtreecommitdiffstats
path: root/config.php.example
diff options
context:
space:
mode:
authorSimon Rettberg2021-01-22 10:34:42 +0100
committerSimon Rettberg2021-01-22 10:34:42 +0100
commit242b0e0a204db1dcf9ea453ec1a86618fc740ebf (patch)
tree61181b5254314909cba1a86fe1b998b0a14627d0 /config.php.example
parent[adduser] Fix malformed static method call (diff)
downloadbwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.tar.gz
bwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.tar.xz
bwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.zip
[deploy] Improve account merging
* Make matching of name and email case insensitive * Add config option to allow/disallow merging with existing shib-account
Diffstat (limited to 'config.php.example')
-rw-r--r--config.php.example7
1 files changed, 7 insertions, 0 deletions
diff --git a/config.php.example b/config.php.example
index 083c555..919ad91 100644
--- a/config.php.example
+++ b/config.php.example
@@ -24,6 +24,13 @@ define('CONFIG_IDM_LINK_EPSA', 'https://www.bwidm.de/attribute/#eduPersonScopedA
define('CONFIG_SURNAME', 'sn');
define('CONFIG_EPPN', 'eppn');
define('CONFIG_SCOPED_AFFILIATION', 'affiliation');
+// If enabled, when a new user registers, check if there is an existing user with
+// same organizationid, email, first and last name. If so, allow user to merge account
+// with existing one. This should be safe if you trust all the IdPs in your federation,
+// which should be assumed to be true anyways for a million other reasons.
+// If this is false, only offer merge if the existing account is a "test account", local
+// to the masterserver.
+define('CONFIG_ALLOW_SHIB_MERGE', true);
// Have a properties file or set variables here manually.
// Make sure properties file is not in webroot