Dockerized shibboleth service provider for SIGPwny authorization

How it works TL;DR:

App is proxy-protected by shibboleth.
When they sign in, we store their uid and affiliation (student, alum, etc) in their session.
We then redirect them to discord OAuth to get their discord account
Discord bot changes their role based on their affiliation

Changes to make for your own app (run your own service provider)

shibboleth2.xml:

In the line <ApplicationDefaults entityID=https://sp.example.org/shibboleth>: Replace https://sp.example.org with your entity ID.
In the line <Errors [email protected]>: Replace [email protected] with the appropriate support email address for services on this server.

attribute-map.xml:

Uncomment your required attributes

Dockerfile:

Change shib-keygen cmd to use your entityID instead