summaryrefslogtreecommitdiffstats
path: root/config.php.example
diff options
context:
space:
mode:
Diffstat (limited to 'config.php.example')
-rw-r--r--config.php.example21
1 files changed, 16 insertions, 5 deletions
diff --git a/config.php.example b/config.php.example
index 2ea6950..7714153 100644
--- a/config.php.example
+++ b/config.php.example
@@ -15,11 +15,22 @@ define('CONFIG_PROVIDER', 'Universität Freiburg');
define('CONFIG_ADMINS', serialize(array('5fb22037697816a70a847d15245c9f88', '94e48d34587ab9963a2013ddc97e1e45', 'fb91f270a95a5b006be916f2b2da305c')));
-define('CONFIG_IDM_LINK_SN', 'https://www.bwidm.de/attribute/#surname');
-define('CONFIG_IDM_LINK_GIVENNAME', 'https://www.bwidm.de/attribute/#givenName');
-define('CONFIG_IDM_LINK_MAIL', 'https://www.bwidm.de/attribute/#mail');
-define('CONFIG_IDM_LINK_PID', 'https://www.bwidm.de/attribute/#IdPPersistentNameIdentifier');
-define('CONFIG_IDM_LINK_EPSA', 'https://www.bwidm.de/attribute/#eduPersonScopedAffiliation');
+define('CONFIG_IDM_LINK_SN', 'https://www.bwidm.de/attribute.php#Nachname');
+define('CONFIG_IDM_LINK_GIVENNAME', 'https://www.bwidm.de/attribute.php#Vorname');
+define('CONFIG_IDM_LINK_MAIL', 'https://www.bwidm.de/attribute.php#E-Mail-Adresse');
+define('CONFIG_IDM_LINK_PID', 'https://www.bwidm.de/attribute.php#Persistant%20ID');
+define('CONFIG_IDM_LINK_EPSA', 'https://www.bwidm.de/attribute.php#Zugeh%C3%B6rigkeit');
+
+define('CONFIG_SURNAME', 'sn');
+define('CONFIG_EPPN', 'eppn');
+define('CONFIG_SCOPED_AFFILIATION', 'affiliation');
+// If enabled, when a new user registers, check if there is an existing user with
+// same organizationid, email, first and last name. If so, allow user to merge account
+// with existing one. This should be safe if you trust all the IdPs in your federation,
+// which should be assumed to be true anyways for a million other reasons.
+// If this is false, only offer merge if the existing account is a "test account", local
+// to the masterserver.
+define('CONFIG_ALLOW_SHIB_MERGE', true);
// Have a properties file or set variables here manually.
// Make sure properties file is not in webroot