Mediawiki with PluggableAuth and Shibboleth extension

[Darren Boss]

As a follow up to my previous email I was directed to this by the
staff member that did the integration work the the dev wiki:
https://www.mediawiki.org/wiki/Extension:Shibboleth_Authentication#Logout_Functionality

This should generate some "good" discussion. More fuel for my hunch
that the extension can't deal with the call to the wiki logout and
handle the SSO logout redirects.

I seem to recall doing an integration with PluggableAuth and the
SimpleSAMLPhp extensions a while back and I don't recall having this
issue but that was more than a year ago now, probably more than two
year back.

On Wed, Sep 1, 2021 at 11:57 AM Darren Boss
<darren.boss at computecanada.ca> wrote:
>
> We mostly have this combo working on a development instance but the
> logout functionality is not fully working.
>
> I was seeing some CORS errors in the browser during logout but after
> tweaking our development Shibboleth IdP Tomcat server with filters to
> add Access-Control-Allow-Origin headers, those errors went away but
> I'm still encountering an issue where after clicking Logout, I see an
> "Invalid response from server" message popup in the web UI and while
> I'm logged out from MediaWiki, I was never redirected to the IdP for
> logout.
>
> My hunch is that the Shibboleth/PlugableAuth extensions just don't
> deal with that redirect or needs a fix for newer MediaWiki releases.
> Anyone have this extension in use and not experiencing this issue or
> have worked through this problem?
>
> I can post MediaWiki and extension versions in a follow up email.
> Shibboleth SP was newly installed in the last couple weeks so I'm
> assuming the latest release but I don't have direct access to the vm.
> --
> Darren Boss
> Senior Programmer/Analyst
> Programmeur-analyste principal
> darren.boss at computecanada.ca



-- 
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal
darren.boss at computecanada.ca