Latest Posts

Choosing Between Unicon And TIER Images

I posted a new blog entry on my Unicon blog:

If you have reviewed both of my previous postings, you likely noticed that both TIER and Unicon have images for the same applications. Where there is overlap, the TIER images are the officially supported images…

Continuous Delivery Of Grouper Using Jenkins And Docker

I posted a new blog entry on my Unicon blog:

Unicon recently completed a project for the Colorado School of Mines (link is external) to setup a continuous integration/continuous delivery (CI/CD) pipeline that can be used as a template for their work modernizing their application deployment processes going forward…

You Joined The Incommon Federation Now What

I posted a new blog entry on my Unicon blog:

You have paid your InCommon membership dues, your federation admins have been vetted, and you even uploaded your IdP metadata in the InCommon Federation Manager website. Like many new members, you are probably asking yourself, “Now what?”…

Ldap Tls Ssl Config For The Shibboleth Idp Explained

I posted a new blog entry on my Unicon blog:

Many Shibboleth IdP adopters use LDAP as provide both an authentication provider and an attribute source. There is always the question of “do we need to configure TLS/SSL for the IdP’s connection to the LDAP server(s)?”. My response is “always” because we need to protect the user’s credentials even in the most trusted network. My question back to the client, “Why wouldn’t you?”. Often the response is somewhere between “we’ve tried and we got it to work once, but then it broke sometime” and “we could never get it to work”…