[Shib-Users] Shibboleth + WordPress

[Will Norris]

I remember that last year there was a little discussion[0] about
Shibbolizing WordPress and/or WordPress MU. I then ran across Ken
Newquist's recent blog post[1] about it, so I figured I'd see what I
could come up with. I've got something that's pretty close that I'd
love to get any feedback on. You can currently download it from the
WordPress plugin repository here[2]. I also recorded a very brief
screencast[3] to show the basic features. I wrote it using Shibboleth
2.1 and WordPress 2.6.3. It should work in WordPress MU, but I
haven't tested that yet.

Are any universities currently using WordPress in a production
environment where you'd want to Shibbolize it? If so, I'd love to get
some specific use cases and requirements to drive future development.
Right now it's basically written to what would have been required at
USC, since that's the environment I'm most familiar with.

-will

[0]: https://mail.internet2.edu/wws/arc/shibboleth-users/2007-08/msg00285.html
[1]: http://knewquist.edublogs.org/2008/10/28/ldap-and-wordpress-mu/
[2]: http://wordpress.org/extend/plugins/shibboleth/
[3]: http://willnorris.com/videos/shibboleth+wordpress.mov

[Chad La Joie]

Awesome, thanks will. Maybe now I'll set up an IdP on my site and use
it to look in to my WP instance. :)

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
chad....@switch.ch, http://www.switch.ch

[Bryn Smith]

We do have a couple of production instance of shibbolized wordpress in
my dept, and I know of several others on campus here. We use the
http-authentication plugin and some nice apache mod-rewrite rules in
.htaccess and it works a treat. The blogs are world-readable and
specific-user writeable (except for comments, which are world-writeable).

--
Bryn Smith (Ms)
A&SIST
660-2434
jabber IM: br...@jabber.duke.edu

[Christopher Bland]

Bryn,

Did you use Will Norris's module or did you build your own?

[Will Norris]

On Nov 3, 2008, at 5:41 PM, Christopher Bland wrote:

> Bryn,
>
> Did you use Will Norris's module or did you build your own?

I believe they use this plugin[0], which is basically where the
discussion back in August 2007 ended. The main thing I added in my
plugin was to make use of additional Shibboleth attributes for
populating the user profile and assigning users into WordPress user
roles.

[0]: http://wordpress.org/extend/plugins/http-authentication/

[Bryn Smith]

Will is right, we used the plugin linked below. We don't particularly
have a need for those additional attributes at the moment, although I
will keep them in mind for the future. Thank you, Will, for reviving
this discussion, however briefly.

--

[Christopher Bland]

Bryn,

I forgot to ask if you are using MU or regular Wordpress, and if you are
using MU did you need to do anything extra to make things work?

-Chris

[Bryn Smith]

Chris,
Just regular WordPress, not MU. We've talked about it, but haven't had
a need particularly yet.

--