diff --git a/README.md b/README.md index ee0a8c57969173936a380dac444af8799433445a..affbba0c5474eb05518917a2de356279ed7e4882 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ Should do the trick All files below testidp/simplesamlphp should be dropped in a working simplesamlphp installation. The testidp/admin directory should be served as a separate vhost. -This project consists of two separate parts for simpleSAMLphp. This README assumes you know your way around in simpleSAMLphp and know how to setup a working implementation. +This project consists of two separate parts. This README assumes you know your way around in simpleSAMLphp and know how to setup a working implementation. The authentication module is located in modules and is called customauth, and should be enabled like this: @@ -36,20 +36,20 @@ config/authsources.php Don't forget to ```touch enable``` in the module directory to enable the module. -The second part are the DB based *IdP Hosted* and *SP Remote* metadata files, found in metadata. These files enable database based configuration, based on the DB structure found in testidp.sql +The second part is the admin interface and should be hosted independantly. It shares the database based on the DB structure found in testidp.sql -The Database consists of 3 tables: +The Database consists of four tables: * options * idps * config * accounts - + **options** contains the definitions of the adjustable simpleSAMLPHP hosted IdP configuration options, this can be used to render a configuration interface. The options have a key, which is used in config to configure this option for a specific IdP. **idps** contains the vhost based configuration for an IdP and the most important part is the sp_metadata columns, which should contain the connected SP metadata so that this IdP trusts this SP. **config** contains the per-IdP-options values that are dynamically loaded into the IdP config. Most of them change the dynamically created metadata for this IdP. -**accounts** contains the registered SP accounts +**accounts** contains the registered SP accounts in the admin interface