shibboleth sso instead of cacti auth

[sircharles]

Hello, I have a new setup where I am attempting to put cacti behind a SSO product, shibboleth. Surprisingly I have not found any information online thus far that can assist in the proper setup of this. Is something like this supported in cacti? and if so can anyone perhaps nudge me in the right direction to get this setup? Currently we are logging in through our SSO, and then have to log in to cacti. We are finding this quite redundant since we have already been authorized.

Thanks in advance!

[cigamit]

Never heard of shibboleth myself. You would have to write the custom integration as a plugin. There are plugin hooks for authentication.

[sircharles]

Is there a supported way to turn off cacti auth all together that you are familiar with?

[Osiris]

Once you have your sso integrated with apache, you can switch cacti to basic auth. I've done this with a few customers. Any SAML2 SSO works with cacti too through the openidc apache module.