Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
documentation:2.1:start [2019/09/05 21:28]
cmaudoux [Portal]
documentation:2.1:start [2020/01/05 16:48]
cmaudoux [Portal]
Line 152: Line 152:
  
 <note tip> <note tip>
-Issuers timeout : Delay for issuers to submit their authentication requests+Issuers timeout : Delay for issuers to submit their authentication requests 
 + 
 +* To avoid a bad/expired token and lose redirection to the SP protected application after authentication if IdP URLs are served by different load balancers, you can force Issuer tokens to be stored into Global Storage by editing ''​lemonldap-ng.ini''​ in section [portal]: 
 + 
 +<file ini> 
 +[portal] 
 +forceGlobalStorageIssuerOTT = 1 
 +</​file>​
 </​note>​ </​note>​
  
Line 192: Line 199:
 | [[contextswitching|Context switching]] | Switch context other users | | [[contextswitching|Context switching]] | Switch context other users |
 | [[plugincustom|Custom]] | Write a custom plugin | | [[plugincustom|Custom]] | Write a custom plugin |
 +| [[decryptvalue|Decrypt value]] | Decrypt ciphered values |
 | [[loginhistory|Display login history]] | | [[loginhistory|Display login history]] |
 | [[favapps|Display favorite applications]] | Allow users to mark and display some applications as favorite | | [[favapps|Display favorite applications]] | Allow users to mark and display some applications as favorite |
Line 198: Line 206:
 | [[impersonation|Impersonation ]] | Allow users to use another identity | | [[impersonation|Impersonation ]] | Allow users to use another identity |
 | [[notifications|Notifications system]] | | [[notifications|Notifications system]] |
 +| [[refreshsessionapi|Refresh session API]] | Plugin that provides an API to refresh a user session |
 | [[status|Portal Status]] | Experimental portal status page | | [[status|Portal Status]] | Experimental portal status page |
 | [[public_pages|Public pages]] | Enable public pages system | | [[public_pages|Public pages]] | Enable public pages system |
 | [[resetpassword|Reset password by mail]] | | [[resetpassword|Reset password by mail]] |
 +| [[resetcertificate|Reset certificate by mail]] | Allow users to reset their certificate |
 | [[restservices|REST services]] | REST server for [[authproxy|Proxy]] | | [[restservices|REST services]] | REST server for [[authproxy|Proxy]] |
 | [[soapservices|SOAP services]] //​(deprecated)//​ | SOAP server for [[authproxy|Proxy]] | | [[soapservices|SOAP services]] //​(deprecated)//​ | SOAP server for [[authproxy|Proxy]] |
-| [[stayconnected|Stay connected]] | Enable persistent connection on same browser | +| Stay connected | Enable persistent connection on same browser | 
-| Upgrade session | Plugin that explain ​to user that a more secure ​authentication is needed ​instead of rejected it |+| Upgrade session | This plugin explains ​to an already authenticated ​user that a higher ​authentication ​level is required to access the URL instead of reject him |
  
 <​html></​div></​div></​html>​ <​html></​div></​div></​html>​
Line 276: Line 286:
 <​html></​div></​div></​html>​ <​html></​div></​div></​html>​
  
 +<note tip>
 +You can migrate from one session backend to another using the [[changeSessionBackend|session conversion script]].</​note>​
 ===== Applications protection ===== ===== Applications protection =====
  
Line 288: Line 300:
   * [[formreplay|Form replay]]   * [[formreplay|Form replay]]
   * [[customhandlers|Custom Handlers]]   * [[customhandlers|Custom Handlers]]
 +  * [[webserviceprotection|WebServices / API]]
  
 <​html></​div></​div></​html>​ <​html></​div></​div></​html>​
Line 404: Line 417:
   * [[header_remote_user_conversion|Convert HTTP header into environment variable]]   * [[header_remote_user_conversion|Convert HTTP header into environment variable]]
   * [[renater|Connect to Renater Federation]]   * [[renater|Connect to Renater Federation]]
 +  * [[behindproxyminihowto|Run LemonLDAP::​NG components behind a reverse proxy]]
 +  * [[useoutgoingproxy|Configure LL::NG to use an outgoing proxy]]
  
 <​html></​div></​div></​html>​ <​html></​div></​div></​html>​