3. Authentication Solutions

After reading how Apache modules work with OOD and setting up the user map, Open OnDemand can then be integrated with your center's authentication solution by following one of the tutorials below.

Note

If you managed to install an Apache authentication module at your center that currently does not have a tutorial listed below we would greatly appreciate it if you could take the time to contribute a detailed walk-through.

Known OOD Integrated Solutions

• OpenID Connect
• OpenID Connect with Dex
  • Installing OnDemand Dex package
  • Installing OnDemand Dex from source
  • Configuring OnDemand Dex
  • Managing the OnDemand Dex service
  • OnDemand Dex behind Apache reverse proxy
  • Dex Firewall
  • Configuring OnDemand Dex for LDAP
  • Customizing OnDemand Dex
  • OnDemand Dex configuration reference
• Shibboleth
• CAS
• OpenID Connect with KeyCloak on RHEL7
  • Install Keycloak
    • Initial Installation Steps
    • Start Keycloak Server
    • Place Apache in front of Keycloak
    • Differences if installing Keycloak on separate host
  • Configure Keycloak
    • Add a new realm
    • Configure LDAP
    • Add OnDemand as a client
  • Configure OnDemand to authenticate with Keycloak
    • Install mod_auth_openidc
    • Re-generate main configuration using ood-portal-generator
    • Add Keycloak configuration to OnDemand Apache for mod_auth_openidc
  • Add Custom Theme
  • Configure Keycloak with CILogon
    • Register your Keycloak instance with CILogon
    • Add the CILogon Identity Provider
    • Support users removing CILogon mappings
• Two Factor Auth using Duo with Keycloak
  • Install Keycloak Duo SPI
  • Configure Duo SPI
• SAML Authentication with Active Directory Federated Services (ADFS) and mod_auth_mellon
  • Prepare the Host
  • Install mod_auth_mellon
  • Configure mod_auth_mellon
  • Configure OOD
• NSF ACCESS
  • OIDC Client Registration
  • Shibboleth and InCommon
  • Mapping Users
• Insecure Options