nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to allow Anonymous Users when using Shibboleth Authenticator?

Craig Solinski

Hope this finds you well. I've shibbolized Confluence and it is working fine except for one feature I don't seem to know how to enable.
Can or How can 'Anonymous' users access the dashboard. It seems all users are prompted to login automatically prior to getting to the dashboard.

Why would I ask this question? - We have a Federation that will be permitted update privileges, yet we would like others from outside the Federation to 'View' the pages.
Current Confluence version 3.4.9 using Shib 1.7.4 - But soon plan to upgrade to 3.5.11 or maybe 4.0.

Thank you for your kind consideration of this question,
Craig Solinski
Indiana University, Bloomington Indiana
Atlassian Administrator

Accepted answers

Craig Solinski

Atlassian added a section on page: https://studio.plugins.atlassian.com/wiki/display/SHBL/Confluence+Shibboleth+Authenticator called How to Allow Anonymous Access to Certain Parts of Confluence.

Primarily: Configure Shibboleth for Lazy sessions in mod_shib:

module configuration ("ShibRequestSetting requireSession 0")

Also found in seraph-config.xml that the login.url and link.login.url in our environment could be set in form like:
https://xxx.iu.edu/Shibboleth.sso/Login?target=${originalurl}
where the first portion points to your shib app.

Shib is now running over Confluence and allowing both Anonymous and users that can login.

-craig

All comments

Craig Solinski

Atlassian added a section on page: https://studio.plugins.atlassian.com/wiki/display/SHBL/Confluence+Shibboleth+Authenticator called How to Allow Anonymous Access to Certain Parts of Confluence.

Primarily: Configure Shibboleth for Lazy sessions in mod_shib:

module configuration ("ShibRequestSetting requireSession 0")

Also found in seraph-config.xml that the login.url and link.login.url in our environment could be set in form like:
https://xxx.iu.edu/Shibboleth.sso/Login?target=${originalurl}
where the first portion points to your shib app.

Shib is now running over Confluence and allowing both Anonymous and users that can login.

-craig

Joe Clark

Nice investigation :-)

Gary Weaver

Our home in Jira Studio is going away, so you can find the Confluence Shibboleth Authenticator renamed as Confluence HTTP Authenticator at https://marketplace.atlassian.com/plugins/shibauth.confluence.authentication.shibboleth and https://github.com/chauth/confluence_http_authenticator