...
Create a new role
- Edit an existing role - except the ROLE_ADMIN; this role is required by the system
- Delete a role - except the ROLE_ADMIN; this role is required by the system
Creating a Role
The Administrator can create custom roles to apply to users. These custom roles define the user's capability within the group.
To create a custom role:
- Log into Shibboleth IdP UI as an Administrator.
- Select the Roles option from the Advanced menu in the upper right navigation.
- Click the Add new role button.
- Enter a value in the Role Name field.
- Click the Save button.
The Role Management page is displayed, the new role has been added to the list, and a success message is displayed.
At this point, if the Administrator navigates to the Dashboard → Admin tab and clicks in one of the Role menu, the new role will be displayed:
Edit a Role
To Edit a role:
- Log into Shibboleth IdP UI as an Administrator.
- Select the Roles option from the Advanced menu in the upper right navigation.
- Click the Edit icon for the desired role.
- Edit the Role Name field and click the Save button.
NOTE: ROLE_ADMIN cannot be edited or deleted as this role is required by the system.
Delete a Role
To create a role:
- Log into Shibboleth IdP UI as an Administrator.
- Navigates to the Dashboard → Admin tab and verify the role you will be deleting is NOT assigned to any of the users. If it is, you will need to assign those users a new role prior to deleting their existing role.
- Select the Roles option from the Advanced menu in the upper right navigation.
- Click Delete icon for the desired role.
- Click the Delete button on the confirmation popup.
Configuration Sets
The Shibboleth IdP UI has built a registry of all supported properties. Administrator can create Shibboleth configuration sets to group these properties for different Shibboleth instances/environments. For example: Development, QA, Productions.
On the Manage Shibboleth configurations screen the Administrator can perform the following functions:
Create a new configuration set
- Edit an existing configuration set
- Delete a configuration set