ADFS?
My organization is getting ADFS (Active Directory Federation Services) to provide SSO for external providers within our Windows-based intranet. Can MediaWiki take advantage of this technology in some way to achieve single sign-on? Our wiki (Linux-based) already uses LdapAuthentication with users manually logging into the wiki with their NT username and password.
I have never tried this, but my understanding is ADFS supports SAML 2.0, as does Mediawiki if you add the following extension... Extension:SAMLAuth This should work for SSO in a federated environment. If someone could confirm that would be useful.
SAMLAuth may work. You can likely also use an apache module for this, and then have LDAP auth do auto-auth so that you can pull groups and such too, if you need to.
If you just need authentication, and don't need groups and such, I think there are a few web server authentication plugins for MediaWiki as well, then you can use an Apache module in combination with it.
