This module allows you to use Drupal as an Authentication providor for Shibboleth.
This module includes a new Shibboleth login handler that must be configured in your Shibboleth instance to work.
This module also contains a sub-module named "shibboleth_drupalauth_rest_service" which stores a features with a pre-configured service to help with the initial setup.
These instructions require that you have at least a basic understanding of the Shibboleth IdP and have some experience deploying/configuring it.
Caveat
The Drupal site providing authentication must have the same root domain as the Shibboleth Identity Providers.
Example:
Drupal: auth.example.com
IdP: idp.example.com
How this module works
When enabled, this module sets a cookie for any logged in users.
This cookie:
- Is set on a domain and path accessable to both Drupal and the Shibboleth IdP
- Contains the uid of the user and a security token based on that users current session
The DrupalAuth Shibboleth Login Handler, once installed and configured, looks for this cookie.
If the cookie is found, the token is validated using a service hosted by the shibboleth instance.
This validation returns whether or not the session is valid, and if it is, the username and IP address associated to that session.