Extension:SimpleSamlAuth

The SimpleSamlAuth extension enables SAML authentication using [//simplesamlphp.org SimpleSAMLphp].

Installation
This is the management summary; see [//github.com/jornane/mwSimpleSamlAuth/blob/v0.7/README.md README.md] for more information.

1) Install simpleSamlPhp and make sure the www folder is available from the same vhost Mediawiki is installed on (e.g. on /simplesaml).

simpleSamlPhp cannot be configured to use phpession for store.type, since this is not compatible with MediaWiki's session management framework.

2) [//simplesamlphp.org/docs/stable/simplesamlphp-sp Configure simpleSamlPhp].

3) Clone [//github.com/jornane/mwSimpleSamlAuth/tree/v0.7 mwSimpleSamlAuth] to extensions/SimpleSamlAuth. or upgrade

4) Add configuration to LocalSettings.php and change configuration values:

Stability
This extension runs without problems in production environments, but can use some extra testing. Because of this the extension is still set on beta. A Stable version will be released as 1.0 ASAP.

If you encounter any problems, you are welcome to [//github.com/jornane/mwSimpleSamlAuth/issues submit a bug report].

Important
If you run MediaWiki 1.27 or newer, SimpleSamlPhp MUST be configured to use an alternative session handler. If this is not done, SAML authentication succeeds, but MediaWiki still shows that nobody is logged in. Please refer to the SimpleSamlPhp website on how to configure SimpleSamlPhp for session storage.