[wp-edu] Shibboleth?

[VanDrimmelen, Jeff]

Hey All,

We have done a LOT with Shib and are now testing out AD authentication instead of Shib.  You can read one of my colleagues work here at UNC with the plugin and a patch here: http://www.ibiblio.org/archive/2011/10/wordpress-multisite-plus-shibboleth/

Duke has also done some work: https://projects.linux.duke.edu/dukewordpress/browser/plugins (look for the shib one there).

The reason we are exploring using AD instead of shib is purely for authentication reasons.  We need to password protect individual pages and sections inside of wordpress.  It works great if you are just using the default domain and shib (*.web.unc.edu for us), but my understanding is that shib can only give cookies for one domain.  So if we map a domain like *.unc.edu to it then it can not get a cookie for that domain.

But we are working on seeing if we can make it do that since we have everything set up with shib right now (today in fact).

I really like the wordpress AD wordpress plugin though: http://wordpress.org/extend/plugins/active-directory-integration/.  It works great with our infrastructure.  I kind of wish we would have done that from the beginning because shib has been so painful.  Some things in wordpress work better when you use the integrated login instead of redirecting to outside auth.  One example is the remote publishing protocol (read: mobile devices with mobile wordpress apps) does not work with shib because it redirects.

Anyway, it is very complicated.  I didn't do most of the work on this here on campus, but I have been part of all the conversations.  Some of my colleagues might be able to help you more if you need more in depth help.

Best,

~Jeff
University of North Carolina at Chapel Hill

On Mar 14, 2012, at 9:12 AM   Wednesday,  March14, Ken Newquist wrote:


On Mar 14, 2012, at 10:05 AM, Patrick Laverty wrote:

Is anyone using the Shibbileth plugin for their authentication on
WordPress? It seems the plugin stopped working after WP 3.0.5. Just
wondering if anyone else has looked into this and started thinking of
ways to update the Shib plugin.

We're interested in using either Shib or CAS for authing to WordPress, but haven't gone very far down either path. It seems like the modules for both auth types could use some love.

Ken

--
Ken Newquist
Director, Web Applications Development
Lafayette College
p: 610.330.5759
e: newquisk at lafayette.edu<mailto:newquisk at lafayette.edu>
web: http://sites.lafayette.edu/newquisk
podcast: http://sites.lafayette.edu/coffeebreak
cal: https://webmail.lafayette.edu/home/newquisk@lafayette.edu?fmt=freebusy






_______________________________________________
wp-edu mailing list
wp-edu at lists.automattic.com<mailto:wp-edu at lists.automattic.com>
http://lists.automattic.com/mailman/listinfo/wp-edu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.automattic.com/pipermail/wp-edu/attachments/20120314/ea24456e/attachment.htm>