Shibboleth Login for Contao

Some notes about installing the Apache module are in INSTALL-SERVER.md

Prerequisites

• shibd / mod_shib is installed
• The Shibboleth login handler is available in /Shibboleth.sso/Login (this is the default in mod_shib)
• Verify that the login works in general by opening /Shibboleth.sso/Login.
• The module currently expects the following fields to be set in the env by the Apache shibd module:

  REDIRECT_unscoped-affiliation
  REDIRECT_uid
  REDIRECT_sn
  REDIRECT_mail
  REDIRECT_cn
  

Installation

1. Install the package via composer
2. Add the frontend module to your page for the frontend login

Configuration

Add to config/config.yaml (see config/config.yaml for all options)

shibboleth_auth_client:
    shibboleth:
        auto_create_frontend_user: false

Development

Testing

1. CREATE DATABASE contaoshibboleth
2. composer install (in the module directory)
3. vendor/bin/phpunit

Acknowledgements

• Thanks to @markocupic who wrote the SAC Login Bundle which this module is heavily based on.

• Thanks to @aschempp who wrote Contao integration tests and the GitHub pipeline settings which we used as a base for our tests.