imi/shibboleth-contao-login-client-bundle

Contao Shibboleth Login Client

v1.0.0 2025-12-17 11:15 UTC

Requires

• php: ^8.1
• contao/core-bundle: 5.3.*
• juststeveking/uri-builder: ^3.0
• thecodingmachine/safe: ^2

Requires (Dev)

• contao/easy-coding-standard: ^5.0
• contao/manager-plugin: ^2.3.1
• contao/test-case: ^4.6
• phpunit/phpunit: ^9.3
• symfony/phpunit-bridge: ^5.4

MIT

• iMi digital GmbH
• Marko Cupic

• SSO
• shibboleth
• contao

README

Some notes about installing the Apache module are in INSTALL-SERVER.md

Prerequisites

• shibd / mod_shib is installed
• The Shibboleth login handler is available in /Shibboleth.sso/Login (this is the default in mod_shib)
• Verify that the login works in general by opening /Shibboleth.sso/Login.
• The module currently expects the following fields to be set in the env by the Apache shibd module:

  REDIRECT_unscoped-affiliation
  REDIRECT_uid
  REDIRECT_sn
  REDIRECT_mail
  REDIRECT_cn
  

Installation

1. Install the package via composer
2. Add the frontend module to your page for the frontend login

Configuration

Add to config/config.yaml (see config/config.yaml for all options)

shibboleth_auth_client:
    shibboleth:
        auto_create_frontend_user: false

Development

Testing

1. CREATE DATABASE contaoshibboleth
2. composer install (in the module directory)
3. vendor/bin/phpunit

Acknowledgements

• Thanks to @markocupic who wrote the SAC Login Bundle which this module is heavily based on.

• Thanks to @aschempp who wrote Contao integration tests and the GitHub pipeline settings which we used as a base for our tests.