How to allow Anonymous Users when using Shibboleth Authenticator?

[Craig Solinski]

Hope this finds you well. I've shibbolized Confluence and it is working fine except for one feature I don't seem to know how to enable.
Can or How can 'Anonymous' users access the dashboard. It seems all users are prompted to login automatically prior to getting to the dashboard.

Why would I ask this question? - We have a Federation that will be permitted update privileges, yet we would like others from outside the Federation to 'View' the pages.
Current Confluence version 3.4.9 using Shib 1.7.4 - But soon plan to upgrade to 3.5.11 or maybe 4.0.

Thank you for your kind consideration of this question,
Craig Solinski
Indiana University, Bloomington Indiana
Atlassian Administrator

[Craig Solinski · Accepted solution]

Atlassian added a section on page: https://studio.plugins.atlassian.com/wiki/display/SHBL/Confluence+Shibboleth+Authenticator called How to Allow Anonymous Access to Certain Parts of Confluence.

Primarily: Configure Shibboleth for Lazy sessions in mod_shib:

module configuration ("ShibRequestSetting requireSession 0")

Also found in seraph-config.xml that the login.url and link.login.url in our environment could be set in form like:
https://xxx.iu.edu/Shibboleth.sso/Login?target=${originalurl}
where the first portion points to your shib app.

Shib is now running over Confluence and allowing both Anonymous and users that can login.

-craig

[Joe Clark]

Nice investigation :-)

[Gary Weaver]

Our home in Jira Studio is going away, so you can find the Confluence Shibboleth Authenticator renamed as Confluence HTTP Authenticator at https://marketplace.atlassian.com/plugins/shibauth.confluence.authentication.shibboleth and https://github.com/chauth/confluence_http_authenticator