digitalidentity/rasp repository overview

⁠Rasp

⁠What is this?

The Shibboleth Service Provider⁠ is a SAML-based single sign on (SSO) client widely deployed in academic organisations. It's used to provide access control to resources and service for millions of staff and students around the world. The Shibboleth SP integrates very well with Apache HTTPd, providing sophisticated authentication and access control for web pages and web applications.

Rasp is a minimalist, Debian-based Docker image that contains the Apache web server and Shibboleth SP. It is maintained by Digital Identity Ltd⁠ and commercial support is available from Mimoto Ltd.⁠ Rasp is intended to be a solid foundation for other containers but can also be used directly by mounting volumes for configuration directories.

This image is not a ready-to-use, stand-alone SP service - it's meant to be configured and then used in conjunction with other services, or extended with additional software such as PHP or web applications. Rasp aims to be a good Docker image with careful use of layers, correct signal handling, logging to STDOUT by default and a healthcheck.

⁠Why use this?

• Relatively compact (it's still shockingly large TBH but we've tried our best and it's smaller than many others)
• Apache and Shibd processed are properly managed by Runit⁠
• Logging is directed to STDOUT by default
• Apache and Shibboleth SP configuration files are easily customised
• Follows Docker best-practices
• Experimental: also includes mod-auth-openidc and mod-auth-cas (enabled using ENV, see docs on Github)

⁠Any reasons not to use this?

• It is not ready-to-use, and there is no UI or simplified configuration: you need to understand how to configure both Apache HTTPd and Shibboleth SP software.
• It's got no warranty or support by default, but you probably weren't expecting any.
• TLS is up to you: either mount keys and configuration, or use a reverse proxy/load balancer
• Docker should not be used in production unless you have a reliable process for regularly updating images and replacing containers.

For more information please read the full Readme at Github⁠