1 260
szerkesztés
Módosítások
→Account linking
# Authenticate with your IdP
From this point the user can choose to login either with Shibboleth or with username/password. This feature can also be useful for users switching home organizations.
{{INFO_EN|
* One Drupal account can be linked to more than one federated unique identifier, whilehowever
* One federated identifier can only be linked to a single Drupal account
* Nobody can link to ''admin'' or ''Authenticated Anonymous user''
* If the administrator disables this feature, no new associations can be stored. Existing associations remain in effect.
* On a new user logon, the one cannot choose the Drupal username of another user (when ''user-defined usernames'' is active). For account linking, the user must be already logged in.
}}
{{UNCERTAIN|
* Account linking is disabled when the user is logged in by the module. This might change in the future.
* Dynamic roles are roles assigned to server variables, not users. These may well be different on username/password logon and Shibboleth logon.
}}
=== Working with federated identifiers ===
If you enable the option ''User-defined usernames'' in the module configuration, every new user is presented a form to specify a Drupal username. This way you can work with opaque (federated) identifiers such as <code>eduPersonTargetedId</code>, as long as it appears in the $_SERVER variable holding the username. The only limitation is that the federated identifier cannot be longer than 255 characters, however it can contain characters otherwise not allowed in Drupal account names (such as exclamation mark, etc).
=== Administrator / password login ===
