Basic Shibboleth Authentication
BasicShib provides Shibboleth authentication for Drupal, allowing users to log in using their Shibboleth credentials. It uses a plugin system to extend its functionality, enabling custom user provisioning and additional authentication rules.
The BasicShib module provides shibboleth authentication and offers a plugin interface to enable developers to extend its functionality.
This module works similarly to the shib_auth plugin for Drupal 7, but focuses only on authentication and delegates more complex tasks such as role assignment to plugins.
To configure, enter the login/logout handlers and attribute names into the configuration form at Configuration > People > BasicShib Settings.
Note: there are currently a few settings that are not exposed to the UI. You may configure settings by modifying the configuration files directly. Most notably, we require that you edit the auth filter configuration file to enable auto-provisioning of accounts when new users log in with Shibboleth.
Plugins
- UserProvider - loads users. An example use case for overriding would be for sites that want map users to a username that doesn't match the SSO IDs.
- AuthFilter - apply additional authentication rules, e.g. require additional attributes besides username and email
Version 2 and 3
Duke University hosted a diversity and inclusion initiative, called Code+ to "…attracting students from underrepresented communities, including first-generation college students." You may read more about this initiative here. Among the 10 summer projects was the "Drupal Module for Software Design and Development" project. We chose this project since it was internally developed and we were able to use the groundwork to allows students to acquire new paradigms of coding and collaborating using an existing reliable Drupal contributed module.
Version 2
Version 2, dev branch only, reflects changes to port the 8.x branch to 9.x compatibility. It also incorporates several necessary patches.
Version 3
Version 3, dev branch only adds a new Grouper integration plugin.
- Grouper - grants user roles collectively to users sharing certain attributes, as managed by the InCommon Grouper software. Project led by Screenack and developed by jason_shang, tomas_esber_duke, jy300, cm524 and melannienimocks from Duke University’s Code+ Program.
Additional community support
We wish to acknowledge those who generously shared their time and knowledge with our project.