Shib SP and Wordpress MU integration

[Peter Schober]

* Wessel, Keith <kwessel at illinois.edu> [2016-04-07 18:37]:
> It looks like the standard Shibboleth extension for Wordpress,
> though it claims to be Wordpress MU compatible, won't let you map
> attributes to roles on a per-site basis.
> 
> Does anyone know if that last statement is, in fact, true? Or if the
> Shibboleth WP extension can do things differently per-site?

Looks more like a question for that extensions support forum
https://wordpress.org/tags/shibboleth?forum_id=10#postform
or their issue tracker https://github.com/mitcho/shibboleth ?

> He's been looking at a plugin called Mini Orange that has the full
> SAML implementation built into the plugin, no need for an external
> SP installation. But something that offloads the SAML work to the
> Shib SP seems like a more trustworthy option, IMHO.

Comments like the following:
  "Paid version gets you a lot more options and encrypts the relaying
   party trust traffic."
from that plugin's wordpress page[1] make me thing this is not a
standalone SAML2.0 implementation that can be used without using
miniorange' services. (Scary.)
But if that plugin had the features you wanted you could re-use the
good bits, of course. (readme[2] says it's GPLv2, PHP files say
GLPv3).

[1] https://wordpress.org/support/view/plugin-reviews/miniorange-saml-20-single-sign-on
[2] https://plugins.svn.wordpress.org/miniorange-saml-20-single-sign-on/trunk/readme.txt

-peter