{"action":"created","issue":{"url":"https://api.github.com/repos/edx/edx-platform/issues/8140","labels_url":"https://api.github.com/repos/edx/edx-platform/issues/8140/labels{/name}","comments_url":"https://api.github.com/repos/edx/edx-platform/issues/8140/comments","events_url":"https://api.github.com/repos/edx/edx-platform/issues/8140/events","html_url":"https://github.com/edx/edx-platform/pull/8140","id":78847682,"number":8140,"title":"Feature: Shibboleth/SAML SSO","user":{"login":"bradenmacdonald","id":945577,"avatar_url":"https://avatars.githubusercontent.com/u/945577?v=3","gravatar_id":"","url":"https://api.github.com/users/bradenmacdonald","html_url":"https://github.com/bradenmacdonald","followers_url":"https://api.github.com/users/bradenmacdonald/followers","following_url":"https://api.github.com/users/bradenmacdonald/following{/other_user}","gists_url":"https://api.github.com/users/bradenmacdonald/gists{/gist_id}","starred_url":"https://api.github.com/users/bradenmacdonald/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradenmacdonald/subscriptions","organizations_url":"https://api.github.com/users/bradenmacdonald/orgs","repos_url":"https://api.github.com/users/bradenmacdonald/repos","events_url":"https://api.github.com/users/bradenmacdonald/events{/privacy}","received_events_url":"https://api.github.com/users/bradenmacdonald/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-05-21T05:59:12Z","updated_at":"2015-05-21T05:59:14Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/edx/edx-platform/pulls/8140","html_url":"https://github.com/edx/edx-platform/pull/8140","diff_url":"https://github.com/edx/edx-platform/pull/8140.diff","patch_url":"https://github.com/edx/edx-platform/pull/8140.patch"},"body":"This PR is tracking a feature branch that is under active development. It is not ready for merge.\r\n\r\nJenkins builds on this branch will not work until the Jenkins configuration is updated, as the build machines currently lack two new apt packages required for testing this branch.\r\n\r\n**Description**\r\nThis is the new Shibboleth SSO support integrated into third_party_auth (TPA). See the [technical spec](https://docs.google.com/document/d/1YX_DFfDrU1JxkSME3ha1YpX9mc9AKO5MUMjfLXqmf38/edit) for a lot more background and discussion.\r\n\r\n**Dependencies**\r\n- [x] https://github.com/edx/configuration/pull/2002\r\n- [x] https://github.com/onelogin/python-saml/pull/66 (external upstream PR)\r\n- [ ] https://github.com/onelogin/python-saml/pull/67 (external upstream PR)\r\n- [ ] https://github.com/onelogin/python-saml/pull/68 (external upstream PR)\r\n- [ ] https://github.com/onelogin/python-saml/pull/69 (external upstream PR)\r\n- [ ] https://github.com/omab/python-social-auth/pull/616 (external upstream PR)\r\n\r\n**Constituent PRs**\r\n- [x] https://github.com/edx/edx-platform/pull/8018 - Updates dependencies, adds SAML support\r\n- [ ] (PR 2 ) - Moves provider configuration to the database, implements metadata fetching\r\n- [ ] (Future) Fix for [CRI-9](https://openedx.atlassian.net/browse/CRI-9)\r\n- [ ] (Future) Ability to specify default third_party_auth provider via query param\r\n- [ ] (Future) UX changes: Ability to configure specific SSO providers as \"secondary\" providers\r\n\r\n**Sandbox**\r\n* http://sandbox5.opencraft.com/login\r\n* http://sandbox5.opencraft.com/auth/saml/metadata.xml\r\n\r\n**Upgrade Issues**\r\nWhen merged, this PR does cause a problem for existing installations: `python-social-auth` at one point converted from `syncdb` to south/django migrations, and bumping the version of `python-social-auth` that we use will result in this error next time `paver update_db` is run:\r\n```\r\ndjango.db.utils.DatabaseError: table \"social_auth_usersocialauth\" already exists\r\n```\r\n\r\nTo fix this (on devstack), the user must manually run this command:\r\n```\r\n./manage.py lms migrate default 0001_initial --fake --settings=devstack\r\n```\r\nUnfortunately, I'm not aware of any way to avoid this issue other than this manual fix. New installs are not affected.\r\n"},"comment":{"url":"https://api.github.com/repos/edx/edx-platform/issues/comments/104148127","html_url":"https://github.com/edx/edx-platform/pull/8140#issuecomment-104148127","issue_url":"https://api.github.com/repos/edx/edx-platform/issues/8140","id":104148127,"user":{"login":"edx-webhook","id":8964148,"avatar_url":"https://avatars.githubusercontent.com/u/8964148?v=3","gravatar_id":"","url":"https://api.github.com/users/edx-webhook","html_url":"https://github.com/edx-webhook","followers_url":"https://api.github.com/users/edx-webhook/followers","following_url":"https://api.github.com/users/edx-webhook/following{/other_user}","gists_url":"https://api.github.com/users/edx-webhook/gists{/gist_id}","starred_url":"https://api.github.com/users/edx-webhook/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/edx-webhook/subscriptions","organizations_url":"https://api.github.com/users/edx-webhook/orgs","repos_url":"https://api.github.com/users/edx-webhook/repos","events_url":"https://api.github.com/users/edx-webhook/events{/privacy}","received_events_url":"https://api.github.com/users/edx-webhook/received_events","type":"User","site_admin":false},"created_at":"2015-05-21T05:59:14Z","updated_at":"2015-05-21T05:59:14Z","body":"Thanks for the pull request, @bradenmacdonald! It looks like you're a member of a company that does contract work for edX. If you're doing this work as part of a paid contract with edX, you should talk to edX about who will review this pull request. If this work is not part of a paid contract with edX, then you should ensure that there is an OSPR issue to track this work in [JIRA](https://openedx.atlassian.net), so that we don't lose track of your pull request. \n\nTo automatically create an OSPR issue for this pull request, just visit this link: http://openedx-webhooks.herokuapp.com/github/process_pr?number=8140&repo=edx%2Fedx-platform"}}