multiauth | An attempt at preserving the codebase of the MultiAuth

multiauth is a PHP library. multiauth has no bugs, it has no vulnerabilities, it has a Strong Copyleft License and it has low support. You can download it from GitHub.

The 'MultiAuthPlugin/' folder should be placed under the 'wiki/extensions/' directory. The plugin can be activated by putting the following lines at the end of the 'wiki/LocalSettings.php'. To activate the debug log capability you have to make the 'log/' directory writeable by the web server and create a 'log/debug.log' file - also writeable by the web server. At the Regional Computing Centre Erlangen (RRZE) we use the popular MediaWiki software (in many projects for documentation and publication purposes. With the development of a Single Sign On infrastructure based on SimpleSAMLphp and Shibboleth we needed to make MediaWiki SSO capable in a flexible and easily configurable way. We are aware that there are already extensions out there providing simple SSO capabilities, but we wanted more. So we started developing the MediaWiki MultiAuthPlugin with the goal to provide a single plugin to manage all possible authentication scenarios with one single extension -- for example local authentication via original MediaWiki login dialog (as fallback), SSO via Shibboleth, SSO via SimpleSAMLphp, and so on. The MediaWiki MultiAuthPlugin v1.4.0 was developed and tested using MediaWiki v1.18.0 and SimpleSamlPHP v1.8.0. So it should be working flawlessly with these versions. The MultiAuthPlugin hacks into MW's UserLoadFromSession Hook and replaces the global $wgAuth authentication instance to take complete control of the user authentication. In addition the extension also installs two new special pages to replace the original login/logout special pages. This way the user can choose how he would like to authenticate from the configured methods. The plugin allows you to - use local MW authentication in parallel with external authentication - completely forbid local authentication - if desired - configure an external authentication library for SSO Currently one of {Shibboleth, SimpleSAMLphp} or both is possible - auto-create local user accounts if authenticated externally - auto-update changed user preferences in local user accounts if authenticated externally - send e-mail notification about auto-created users to a configurable e-mail address. If you make the log/ directory writeable the extension also provides a debug.log file to help you identify possible errors. There are some localisation issues known. At the moment the MultiAuthPlugin calls MessageCache->recache() once per call which is less than ideal for performance reasons. If someone can provide a fix for this you would be very welcome to let me know ;).