SimpleShib
| 开发者 | srg-1 |
|---|---|
| 更新时间 | 2020年6月20日 06:38 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 5.4 |
| 版权: | MIT |
详情介绍:
安装:
shibd daemon must be installed, configured, and running on the same server as Apache/WordPress. Additionally, Apache's mod_shib module must be installed and enabled. These steps vary based on your operating system and environment. Installation and configuration of the IdP and SP is beyond the scope of this plugin's documentation. Reference the official Shibboleth documentation.
- Install the plugin to
wp-content/plugins/simpleshibvia your normal plugin install method (download and extract ZIP,wp plugin install, etc). - Add the following to Apache's VirtualHost block and restart Apache. This will ensure the shibd daemon running on your server will handle
/Shibboleth.sso/requests instead of WordPress.
<Location /> AuthType shibboleth Require shibboleth </Location> RewriteEngine on RewriteCond %{REQUEST_URI} ^/Shibboleth.sso($|/) RewriteRule . - [END]
1. Activate the SimpleShib plugin in WordPress.
1. Browse to Settings->SimpleShib and edit the configuration.屏幕截图:
常见问题:
What is Shibboleth?
From Wikipedia:
"Shibboleth is a single sign-on (log-in) system for computer networks and the Internet. It allows people to sign in using just one identity to various systems run by federations of different organizations or institutions. The federations are often universities or public service organizations."
Can I test this without an IdP?
Maybe. Check out TestShib.org. Note, you still need the SP/shibd configured on the server with Apache/WordPress.
A shibboleth plugin already exists; why write another?
My attempts to use the other Shibboleth plugin failed for various technical reasons. It seemed to be unmaintained at the time. I ended up modifying the plugin heavily. I finally got to the point where I just wrote my own.
The domain name is not correct after a redirect
Add the following to Apache's config:
UseCanonicalName On
Can I automatically set user roles based on IdP data?
No. SimpleShib handles authentication, not authorization. Authorization is managed within WordPress by network admins or site admins.
What's this MIT license?
SimpleShib is released under the MIT license. The MIT license is short, simple, and very permissive. Basically, you can do whatever you want, provided the original copyright and license notice are included in any/all copies of the software. You may modify, distribute, sell, incorporate into proprietary software, use privately, and use commerically.
There is no warranty and the author or any contributors are not liable if something goes wrong.
See the LICENSE file for full details.
更新日志:
- Compatibility with WordPress 5.4.
- Require PHP 7.2.
- Documentation updates.
- Add options for custom IdP attributes.
- Documentation updates.
- Move configuration into the database.
- Compatibility with WordPress 5.3.
- Fix a return_to URL bug that affected multisite.
- Documentation updates.
- Compatibility with WordPress 5.2.
- Improve compliance with WordPress coding standards.
- Minor documentation updates.
- Add a boolean setting for automatic account provisioning.
- Update example logout URL to return to the IdP's logout page.
- Compatibility with WordPress 5.1.
- Improve compliance with WordPress coding standards.
- Use wp_safe_redirect() when possible.
- Move PHP class into a separate file.
- Change install instructions from a must-use plugin to a network-activated plugin.
- Compatibility with WordPress 5.
- Improve compliance with WordPress coding standards.
- Minor documentation updates.
- Minor documentation and code changes.
- Add plugin banner to assets.
- Initial release.