michaelryanmcneill / shibboleth

Shibboleth plugin for WordPress
https://wordpress.org/plugins/shibboleth/
21 stars 12 forks source link

Allow full multisite authentication via a single subsite #29

Closed michaelryanmcneill closed 4 years ago

michaelryanmcneill commented 6 years ago

Currently, if you're running a subdomain multisite (or multisite with domain mapping), and your IDP is configured to not bypass endpoint checks (for more info, see: https://docs.shib.ncsu.edu/docs/advanced/bypassends.html), you will have to manually keep a list of endpoints registered in metadata. This is not ideal for large multisite networks where there are thousands of sites. Instead, we should allow an additional "Multisite" configuration tab and options set that would allow for authentication to come from a single subsite (or the main site), like those provided by this plugin: https://github.com/DevriX/multisite-auth.

michaelryanmcneill commented 4 years ago

Since there has been limited interest in this specific use case, I'm going to close this out as wontfix. If someone is interested in implementing this functionality, please provide a proposed PR with an associated fix.