sojweb

THIS IS FOR DEVELOPMENT PURPOSES, NOT FOR USE ON PRODUCTION SITES
This plugin is meant to be a reference; I’ve talked to several people who have similar setups, and thought it would beneficial to share some code.
This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP. Default user roles can be assigned based on LDAP group membership, and accounts can be auto-created for users that exist in LDAP, but not yet in WordPress.
It assumes that, for CAS authentication, the user is redirected to an outside address, then back to the referring address; that’s how it works where I’m at :-). You can also specify a group in LDAP that will always have admin privileges; useful for tech staff.
Before the plugin is used, the constants in <code>soj-ldap_constants.inc.php</code> must be filled out. The CAS default password is the one the user is registered with in WordPress; so all WP users will have this password. Be aware of that. There is obviously more that could be done there, and I’m happy to work with others who have ideas.
I’ve adapted this from an in-house plugin I made, so there might be leftover code bits or things that look strange… feel free to harass me about that, I did this in a bit of a rush.
I’ve only ever used this plugin on one environment, so it might not work out-of-the-box for you. I’m interested in making this plugin more robust, however, so please let me know of any issues.
Contact me: jj56@indiana.edu

SoJ CAS/LDAP Login

This plugin allows users to be authenticated via CAS, and logins to be controlled via LDAP.

gpspake

This plugin uses the phpCAS library to integrate CAS single sign on with WordPress.
<ul>
<li>Provide users with a familiar secure login on multiple WordPress sites without the need for additional expensive ssl certificates.</li>
<li>phpCAS configuration settings can be set in the plugin options </li>
<li>Login screen redirects to CAS url specified in options </li>
<li>New user accounts will be created for users who have not logged in to the site yet </li>
<li>User attributes returned by CAS can be used to populate new user account details such as email address and display name. </li>
<li>Service urls can be captured to redirect users to the same page on log in/out. (Logoutwithredirectservice must be enabled on CAS server for log out redirects to work.)</li>
</ul>
<h3>Special thanks</h3>
David R. Poindexter III and Indiana University – During the development of this plugin, IU-WPCAS was one of the only CAS plugins for WordPress and provided a good bit of inspiration. Clearly, our plugin’s name is completely original.
Todd Barber and Billy Barnet @ UTHSC for all of their patience, support and good advice

UTHSC WPCAS

Integrate Central Authentication Service (CAS) with WordPress

SoJ CAS/LDAP Login vs UTHSC WPCAS