Download the PHP package safire-ac-za/simplesamlphp-module-sqlattribs without Composer
On this page you can find all versions of the php package safire-ac-za/simplesamlphp-module-sqlattribs. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download safire-ac-za/simplesamlphp-module-sqlattribs
More information about safire-ac-za/simplesamlphp-module-sqlattribs
Files in safire-ac-za/simplesamlphp-module-sqlattribs
Package simplesamlphp-module-sqlattribs
Short Description SimpleSAMLphp module to provide additional attributes from a SQL database
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package simplesamlphp-module-sqlattribs
sqlattribs:AttributeFromSQL
This SimpleSAMLphp auth proc filter allows you to provides additional attributes from a SQL datastore. It is useful in situations where your primary authsource is a directory (e.g. AD) that you do not have direct control over, and you need to add additional attributes for specific users but cannot add them into the directory/modify the schema.
Installation
Once you have installed SimpleSAMLphp, installing this module is very simple. Just execute the following command in the root of your SimpleSAMLphp installation:
where dev-master instructs Composer to install the master (development)
branch from the Git repository. See the
releases
available if you want to use a stable version of the module.
You then need to create the following table in your SQL database:
Note that if you are upgrading from v1.2 or earlier you need to make the following change to your existing database:
Usage
This module provides the sqlattribs:AttributeFromSQL auth proc filter, which can be used as follows:
Where the parameters are as follows:
-
class- the name of the class, must be sqlattribs:AttributeFromSQL -
identifyingAttribute- the attribute to use as the uid/key for database searches, defaults to eduPersonPrincipalName if not specified. -
limit- an optional array specifying the attribute names we can add. If not specified, all attributes that are found in the database are added. Defaults to allowing all attributes. -
replace- behaviour when an existing attribute of the same name is encountered. Iffalse(the default) then new values are pushed into an array, creating a multi-valued attribute. Iftrue, then existing attributes of the same name are replaced (deleted). -
ignoreExpiry- ignore any expiry date (default is to ignore attributes that are beyond the date in theexpirescolumn). -
database- an array containing information about the data store, with the following parameters:-
dsn- the data source name, defaults to mysql:host=localhost;dbname=simplesamlphp -
username- the username to connect to the database, defaults to none (blank username) -
password- the password to connect to the database, defaults to none (blank password) table- the name of the table/view to search for attributes, defaults to AttributeFromSQL
-
Adding attributes
This module provides no interface to add attributes into the database. This can be done manually with SQL similar to the following:
The optional sp field (defaults to '%' with the above SQL CREATE) is used
to limit which SP sees a particular attribute. The special value %
is used to indicate all SPs. If you wish to indicate more than one SP but
not all, insert multiple lines.
Where multiple attributes of the same name occur, these become a single multi-valued attribute. Thus assuming the user [email protected] started with attributes of:
The the above SQL table and example auth proc filter would lead to a combined attribute set of:
Note that because the the limit parameter, the mail attribute was not added. And because replace was false, eduPersonAffiliation was merged. It is assumed that this SP has an Entity Id of https://sp.example.org/shibboleth-sp - other SPs would not see the SP-specific eduPersonEntitlement attribute.
