Download the PHP package utexas/pantheon_saml_integration without Composer
On this page you can find all versions of the php package utexas/pantheon_saml_integration. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download utexas/pantheon_saml_integration
More information about utexas/pantheon_saml_integration
Files in utexas/pantheon_saml_integration
Package pantheon_saml_integration
Short Description Composer plugin that integrates the University of Texas Enterprise Authentication on Pantheon for the UT Drupal Kit
License GPL-2.0-or-later
Homepage https://drupalkit.its.utexas.edu
Informations about the package pantheon_saml_integration
Pantheon SAML Integration
This is a Composer plugin that integrates the University of Texas Enterprise Authentication on Pantheon for the UT Drupal Kit.
Full user documentation can be found at https://drupalkit.its.utexas.edu/docs/getting_started/pantheon_setup.html#integrating-enterprise-authentication
Architectural overview
Getting the University's SAML-based sign-in method (Enterprise Authentication) working with Drupal, on Pantheon, involves a coordination of different components. The following provides a high-level explanation of how the pieces fit together:
- Enterprise Authentication: the login system, developed and maintained by the University's Information and Access Management (IAM) team that allows applications to use EID-based authentication. It supports Security Assertion Markup Language version 2.0 (SAML 2). In Single Sign On (SSO) terminology, this acts as the Identity Provider (IdP).
- simplesamlphp library: a third-party library which provides the business logic to handle SAML requests in PHP. It has a large collection of sub-libraries. We use only the base library. In SSO terminology, it acts as the Service Provider (SP).
- pantheon_saml_data. This is a collection of certificate and metadata attributes that authorize the
simplesamlphplibrary to talk to Enterprise Authentication. These were provisioned in coordination with the IAM team. - simplesamlphp_auth: A Drupal module that integrates the request/response API from
simplesamlphpinto Drupal's authentication system. Specifically, it provides a way for Drupal to redirect users to Enterprise Authentication and then evaluate the response sent back after a login and take action with Drupal's user login/registration system based on that response. We also use this module on some sites to do EID-affiliation-based authorization, such as allowing EID holders with the affiliationcurrent-staffto receive the Drupal rolestaff. - pantheon_saml_integration: a Composer plugin developed by the WCMS team to connect the above components in the Pantheon filesystem. This plugin, for example, creates a required symlink at
/simplesamlfor the simplesamlphp library, and symlinks for the certificates and metadata from Pantheon's private file system. As a Composer plugin distributed on Packagist that has a dependency onsimplesamlphp_auth, it is the only package sites need to require in theircomposer.jsonto have all the elements needed in the codebase.
All versions of pantheon_saml_integration with dependencies
composer/installers Version ^1.9 || ^2.0
drupal/core Version ^10
drupal/simplesamlphp_auth Version 4.0.1
simplesamlphp/simplesamlphp Version 2.4.1
utexas/utexas_saml_auth_helper Version ^3.5