sojweb

THIS IS FOR DEVELOPMENT PURPOSES, NOT FOR USE ON PRODUCTION SITES
This plugin is meant to be a reference; I’ve talked to several people who have similar setups, and thought it would beneficial to share some code.
This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP. Default user roles can be assigned based on LDAP group membership, and accounts can be auto-created for users that exist in LDAP, but not yet in WordPress.
It assumes that, for CAS authentication, the user is redirected to an outside address, then back to the referring address; that’s how it works where I’m at :-). You can also specify a group in LDAP that will always have admin privileges; useful for tech staff.
Before the plugin is used, the constants in <code>soj-ldap_constants.inc.php</code> must be filled out. The CAS default password is the one the user is registered with in WordPress; so all WP users will have this password. Be aware of that. There is obviously more that could be done there, and I’m happy to work with others who have ideas.
I’ve adapted this from an in-house plugin I made, so there might be leftover code bits or things that look strange… feel free to harass me about that, I did this in a bit of a rush.
I’ve only ever used this plugin on one environment, so it might not work out-of-the-box for you. I’m interested in making this plugin more robust, however, so please let me know of any issues.
Contact me: jj56@indiana.edu

SoJ CAS/LDAP Login

This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP.

sandrof

Henrique Mouta

jpargana

ricardobaeta

If you have a CAS service and you want to authenticate your users in WordPress with the same credentials, you can use this plugin to get the job done.
The users that attempt to start their sessions in WordPress, will be redirected to the CAS single sign-on page, where their sessions starts. If the user data is valid, they are redirected back to WordPress. If the credentials already exist in your WordPress the user will be authenticated. Otherwise, if the user was pre-registered in the configuration page, the user will be created.
CAS Maestro can also connect to a LDAP server to access personal data to be used in user profile.
Features included:
<ul>
<li>Full integration with the WordPress authentication system</li>
<li>One of the most secure CAS plugins for WordPress</li>
<li>Possibility to pre-register some known users, with the desired role</li>
<li>LDAP integration for user data fill, such as name and e-mail </li>
<li>Validation mechanisms to avoid getting blocked in case of misconfiguration</li>
<li>Mail notification for pre-registered users</li>
<li>Network activation allowed (todo: network panel for configuration)</li>
</ul>

CAS Maestro

CAS Maestro allows you to configure your centralized authentication service, CAS, for an integrated log in with WordPress. LDAP is optional.

SoJ CAS/LDAP Login vs CAS Maestro