diff --git a/lib/Authentication/AuthTokens/ShibAuthToken.php b/lib/Authentication/AuthTokens/ShibAuthToken.php
index 3361b5cc8..632bac5ea 100644
--- a/lib/Authentication/AuthTokens/ShibAuthToken.php
+++ b/lib/Authentication/AuthTokens/ShibAuthToken.php
@@ -122,7 +122,7 @@ private function getAttributesInitToken(){
}
if(empty($_SERVER['entitlement'])){
//die('Did not recieve the required entitlement attribute from the EGI Proxy IdP, please contact gocdb-admins');
- $HTML = '
';
+ $HTML = $this->getEntitlementErrorMessage();
$HTML .= "";
$HTML .= '
Logout';
$HTML .= "
";
@@ -132,7 +132,7 @@ private function getAttributesInitToken(){
$entitlementValuesArray = explode(';', $_SERVER['entitlement']);
if( !in_array('urn:mace:egi.eu:res:gocdb#aai.egi.eu', $entitlementValuesArray) ){
- $HTML = '';
+ $HTML = $this->getEntitlementErrorMessage();
$HTML .= "";
$HTML .= '
Logout';
$HTML .= "
";
@@ -204,4 +204,21 @@ public static function isStateless() {
return true;
}
+ private function getEntitlementErrorMessage()
+ {
+ $resourceLink = "https://docs.egi.eu/internal/configuration-database";
+ $sectionFragmentInfo = "/access/#using-institutional-account-via-egi-check-in";
+ $documentationURL = $resourceLink . $sectionFragmentInfo;
+
+ return ''
+ .'- Login requires the entitlement "urn:mace:egi.eu:res:gocdb#aai.egi.eu", '
+ . 'which was not provided. This entitlement is automatically granted when using '
+ . 'an identity provider compliant with '
+ . 'REFEDS R&S '
+ . 'and REFEDS Sirtfi. '
+ . 'Please see here for more information: '
+ . '' . $documentationURL . '.'
+ . '
'
+ . '
';
+ }
}