Web Hosting - WordPress NetID Login via Shibboleth

This document provides a basic guideline for integrating NetID login via Shibboleth into a custom instance of WordPress.

By default, DoIT Web Hosting provides NetID login integration services and your site should already be NetID Login capable. Web Hosting - Using NetID or Wisconsin Federated login

1. Starting on your equivalent Test environment Web Hosting - Test Site Utilization  

-- Install a trusted SAML/Shibboleth Single Sign plugin via https://wordpress.org/plugins/

2.  Follow the instructions on the install of the plugin. 

NOTE: Many plugins will attempt to set the appropriate directives in WordPress’s .htaccess file automatically.  If not, you will need to manually add the entry for Shibboleth and exemption from the default rewrite rules, which can interfere with Shibboleth if not in place.

At the beginning of the .htaccess file:

# Require Lazy Session
AuthType shibboleth
ShibDisable Off
ShibRequestSetting applicationId yourdomain.wisc.edu
ShibRequestSetting requireSession 0

 # Shibboleth quick-exit from rewrite rules
 RewriteEngine on
 RewriteCond %{REQUEST_URI} ^/Shibboleth.sso($|/)
 RewriteRule . - [L]

3.  Some of the common settings the plugins will require:

Login URL: https://yourdomain.wisc.edu/Shibboleth.sso/Login

Logout URL: https://yourdomain.wisc.edu/Shibboleth.sso/Logout

Username: eppn

Keywords:NetId, login, shibboleth, access, SAML, single sign in, plugin in, IDP, attributes, entity ID, sessions, lazy sessions, rewrite rules   Doc ID:101621
Owner:Jake S.Group:DoIT Web Hosting
Created:2020-05-01 08:38 CDTUpdated:2020-05-01 09:27 CDT
Sites:DoIT Web Hosting
Feedback:  0   0