# Shibboleth and authorizer mode

**URL:** <https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080>\
**Category:** NGINX\
**Created:** [November 21, 2011, 12:08pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080 "2011-11-21T12:08:40Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\
**Post date:** [November 21, 2011, 12:08pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/1 "2011-11-21T12:08:40Z")

</div>

Hello everyone

I need to confirm something for a work colleague

This page

[https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig](https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig)

states this

“Nginx has fastcgi responder support but not the “authorizer” mode  
needed for the filter. Until this support exists nginx cannot be used in  
this way.”

Can anyone confirm that is still the case? If so, are there any plans  
to remedy this situation? If not, please say, I just need to let  
someone else know.

Thanks

V

Posted at Nginx Forum:

> **[shibboleth and authorizer mode](https://forum.nginx.org/read.php?2,218694,218694#msg-218694)**
>
> Hello everyone I need to confirm something for a work colleague This page https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig states this "Nginx has fastcgi responder support but not the "aut

---

<div class="post-metadata">

**Author:** ![vanderkerkoff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/7feea3/32.png) [@vanderkerkoff](https://www.ruby-forum.com/u/vanderkerkoff)\
**Post date:** [November 21, 2011, 12:17pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/2 "2011-11-21T12:17:57Z")

</div>

Hello!

On Mon, Nov 21, 2011 at 06:08:09AM -0500, vanderkerkoff wrote:

> “Nginx has fastcgi responder support but not the “authorizer” mode  
> needed for the filter. Until this support exists nginx cannot be used in  
> this way.”
> 
> Can anyone confirm that is still the case? If so, are there any plans  
> to remedy this situation? If not, please say, I just need to let  
> someone else know.

Confirmed: nginx doesn’t support fastcgi authorizer role (as well  
as fastcgi filter role).

There are no plans to fix this. If you need functionality mostly  
identical to fastcgi authorizers (but not bound to fastcgi), you  
may want to take a look at auth\_request module,

> **[ngx\_http\_auth\_request\_module: log](http://mdounin.ru/hg/ngx_http_auth_request_module/)**

Maxim D.

---

<div class="post-metadata">

**Author:** ![vanderkerkoff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/7feea3/32.png) [@vanderkerkoff](https://www.ruby-forum.com/u/vanderkerkoff)\
**Post date:** [November 21, 2011, 12:22pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/3 "2011-11-21T12:22:55Z")

</div>

Thanks Maxim

You wouldn’t know off the top of your head if I could use auth\_request  
to authorize with shibboleth would you?

V

Posted at Nginx Forum:

> **[Re: shibboleth and authorizer mode](https://forum.nginx.org/read.php?2,218694,218696#msg-218696)**
>
> Hello everyone I need to confirm something for a work colleague This page https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig states this "Nginx has fastcgi responder support but not the "aut

---

<div class="post-metadata">

**Author:** ![vanderkerkoff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/7feea3/32.png) [@vanderkerkoff](https://www.ruby-forum.com/u/vanderkerkoff)\
**Post date:** [November 21, 2011, 1:36pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/4 "2011-11-21T13:36:07Z")

</div>

Hello!

On Mon, Nov 21, 2011 at 06:22:26AM -0500, vanderkerkoff wrote:

> Thanks Maxim
> 
> You wouldn’t know off the top of your head if I could use auth\_request  
> to authorize with shibboleth would you?

No idea, most likely the answer is “no” as long as it needs  
fastcgi authorizer role.

Auth\_request is similar in the functionality it provides, but a  
bit different in details how it’s implemented.

Maxim D.

---

<div class="post-metadata">

**Author:** ![vanderkerkoff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/7feea3/32.png) [@vanderkerkoff](https://www.ruby-forum.com/u/vanderkerkoff)\
**Post date:** [March 7, 2013, 2:40pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/5 "2013-03-07T14:40:29Z")

</div>

Hi,

I need to implement shebboleth SP with nginx webserver but got to know  
that  
nginx doesn’t support autorizer mode.  
I saw that the above post is dated very old.

I would like to check whether this is still the case or has there been  
any  
fix provided from nginx for this ?  
Is there any way this can be achieved ?

Regards,  
Amit Thukral

Posted at Nginx Forum:

> **[Re: shibboleth and authorizer mode](https://forum.nginx.org/read.php?2,218694,237063#msg-237063)**
>
> Hello everyone I need to confirm something for a work colleague This page https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig states this "Nginx has fastcgi responder support but not the "aut

---

<div class="post-metadata">

**Author:** ![vanderkerkoff](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/v/7feea3/32.png) [@vanderkerkoff](https://www.ruby-forum.com/u/vanderkerkoff)\
**Post date:** [November 21, 2011, 1:49pm UTC](https://www.ruby-forum.com/t/shibboleth-and-authorizer-mode/214080/6 "2011-11-21T13:49:49Z")

</div>

Thanks Maxim

Posted at Nginx Forum:

> **[Re: shibboleth and authorizer mode](https://forum.nginx.org/read.php?2,218694,218705#msg-218705)**
>
> Hello everyone I need to confirm something for a work colleague This page https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig states this "Nginx has fastcgi responder support but not the "aut
