Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

第一步:了解CARSI项目、CARSI IdP和SP。

...

        This is the only way to join CARSI. Before applying online. Please contact 2 CARSI IdP members, a SP member must have 2 full members as the referrer, CARSI needs the confirmations from these 2 IdP members before approving your membership.

第三步:仔细阅读”SP会员申请表&承诺书“及相关材料,确认无误后,打印申请成功邮件的附件pdf,签字盖章后,按照邮件提示,邮寄纸质申请材料。

...

        CARSI will review and approve your membership request once all the materials are received. At the current stage, CARSI only accepts the requests from applications serving Education and Research.

第四步:收到审核通过邮件后,开始SP接入技术调试。

...

There are 3 approaches to debug your SP with CARSI, you can choose one based on you SP's situation. You can subbmit your documents through CARSI Online Helpdesk.

1. 在向CARSI提交申请之前,SP已经接入eduGAIN  在向CARSI提交申请之前,SP已经接入eduGAIN (Before joining CARSI, this SP has already joined eduGAIN):

...

        Before joining CARSI, this SP has already joined eduGAIN. CARSI will retrieve the metadata from eduGAIN, you need to add a SP in CARSI Online Helpdesk, providing SP name, description, service address, SP EntityID which can be located in eduGAIN metadata feed. Please refer to 1. eduGAIN SP接入(Joining CARSI for eduGAIN SP) for details.

        2. 自建Shibboleth SP接入 (a new Shibboleth SP):

        这种方式适用于应用系统已经支持Shibboleth认证、已实现Shibboleth SP、但尚未加入eduGAIN的情况,或适用于希望新建/改建应用系统的认证授权部分以支持CARSI接入的情况。此方式需SP服务提供单位自主安装Shibboleth SP来保护待接入的应用系统,并将该SP接入到CARSI联盟。详细流程参见: 2. 自建Shibboleth SP接入(Joining CARSI for Shibboleth SP)

        This is a new Shibboleth SP, thie case is suitible for creating/updating the login part of your existing application to support CARSI access. You need to install and configure your Shibboleth SP to protect your application, and use this Shibboleth SP to join CARSI. Please refer to 2. 自建Shibboleth SP接入(Joining CARSI for Shibboleth SP) for details.

        3. 使用CARSI提供的SP OAuth网关接入(join CARSI through the CARSI SP OAuth gateway):

...

        Join your existing application into CARSI through CARSI SP OAuth gateway.  SP+OAuth gateway acts as the Shibboleth SP, your application dose not need a dedicated Shibboleth SP. In this case the changes to your existing application are limited, your application should support OAuth 2.0 (acts as an OAuth client). Please refer to 3. 通过CARSI SP OAuth网关接入(Joining CARSI for OAuth SP) for details.

第五步:完成技术调试后,邮件联系CARSI联盟北大团队,申请复测及服务上线。联系邮箱:第五步:完成技术调试后,邮件联系CARSI联盟北大团队,申请复测及服务上线。联系邮箱:carsi@pku.edu.cn

Step 5, Once the debug process is complete, contcact CARSI team to apply a test and online operation.  Email: carsi@pku.edu.cn

...