Apache 2 Integration

JOSSO Agent for Apache HTTP Server

Overview

The JOSSO Agent for Apache 2 (mod_auth_josso) provides native Single Sign-On integration for Apache HTTP Server. It intercepts authentication requests and validates user sessions against the JOSSO Identity Provider.

Native Apache module

High performance

Session management

Requirements

Apache HTTP Server 2.2 or 2.4
JOSSO Agent for Apache (mod_auth_josso)
OpenSSL libraries
Network connectivity to JOSSO Server

Installation

1. Install the Module

# Copy the module to Apache modules directory
cp mod_auth_josso.so /usr/lib/apache2/modules/

# Or on Red Hat/CentOS
cp mod_auth_josso.so /usr/lib64/httpd/modules/

2. Load the Module

Add to your Apache configuration (httpd.conf or apache2.conf):

LoadModule auth_josso_module modules/mod_auth_josso.so

Configuration

Virtual Host Configuration

<VirtualHost *:443>
    ServerName app.example.com
    DocumentRoot /var/www/myapp

    # JOSSO Configuration
    JOSSOServerURL https://idp.example.com/josso
    JOSSOPartnerApp my-apache-app
    JOSSOSecurityMode strong

    <Location />
        AuthType JOSSO
        AuthName "JOSSO SSO"
        Require valid-user
    </Location>

    # Public resources (no auth required)
    <Location /public>
        Require all granted
    </Location>
</VirtualHost>

Configuration Directives

Directive	Description
JOSSOServerURL	URL of the JOSSO Identity Provider
JOSSOPartnerApp	Partner application identifier
JOSSOSecurityMode	Security mode (basic, strong)
JOSSOSessionTimeout	Session timeout in seconds

Back to

Application Integration