Shib SP and Wordpress MU integration

[Wessel, Keith]

This might be more of a Wordpress question, but I thought I'd start here.

We've got an admin on campus running a multisite Wordpress installation. He wants, on any given site, to be able to enable Shib vs. local authentication. He also wants to be able, per site, to map attribute values (specifically from the member attribute) to roles in that site, using different member values to map to roles for each site.

It looks like the standard Shibboleth extension for Wordpress, though it claims to be Wordpress MU compatible, won't let you map attributes to roles on a per-site basis.

Does anyone know if that last statement is, in fact, true? Or if the Shibboleth WP extension can do things differently per-site?

And if it can't, does anyone know of an extension that will do the job.

He's been looking at a plugin called Mini Orange that has the full SAML implementation built into the plugin, no need for an external SP installation. But something that offloads the SAML work to the Shib SP seems like a more trustworthy option, IMHO.

Thanks for any advice,
Keith