Wordpress and Shibboleth
Stephen Chan
sychan at lbl.gov
Wed Jul 25 15:13:01 EDT 2012
When I tried out the Wordpress Shib module, it used the Apache
NativeSP. You should be able to use the standard nativesp .htaccess
directives to restrict access. The links that Scott included should
work fine - the rule use a regex to check the value of an attribute
should do the job.
Steve
On Wed, Jul 25, 2012 at 10:51 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 7/25/12 1:41 PM, "Christopher Bland" <chris at fdu.edu> wrote:
>>
>>Not sure what you mean by access control plugin. Are you referring to a
>>plugin for Apache, Shibboleth SP, or a Wordpress? Also do you have a
>>suggestion?
>
> Either Apache or the SP (which has its own layer, plus Apache authz
> support).
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAccessControl
>
>
> I know nothing about Wordpress or how any of it is integrated with
> Wordpress, so it may be of no help, but there has to be some resource
> protected by the SP so there's something that could be locked down. If
> only passive sessions are being used, then that rules out access control.
> That's what motivated the new 2.5 feature for this specific purpose.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list