lady_minx

I think adding define('FORCE_SSL_ADMIN', true); to the config file(which I’d forgotten to do, AND define('FORCE_SSL_LOGIN', true); fixed it.

Now… I just need to figure out how to do a direct link to wp-login.php that does NOT use the simpleSAML plugin authentication filter for my non-network users.

I think the problem is that it’s switching between https and http

Another problem – if I click on a site in my My Sites admin menu drop down, it goes to the wordpress login form rather than staying logged in / using the SSO and sending me to the dashboard.

Fixed it. Posted the fix in https://www.ads-software.com/support/topic/mu-support?replies=9

Okay, fixed the login issue for me. The simplesaml server was sending the username back with upper and lower case letters. The authentication/compare seems to have issues with that.
I changed
if (strtolower($username) != substr(sanitize_user(strtolower($username), TRUE), 0, 60)) {
and was able to login.

I’m still having error logging in.. but I think it’s something with what the ping server is sending back in the user name. It looks okay but…

Other users can login, even after I’ve deleted their account and it gets recreated, but I can’t ??

This will put it on the admin page.

Change

//add_action('admin_menu', 'simplesaml_authentication_add_options_page');

if (is_multisite()){
add_action('network_admin_menu', 'simplesaml_authentication_add_menu_page');
}

else {
add_action('admin_menu', 'simplesaml_authentication_add_options_page');
}

And add a function under Admin Option Page Functions:

function simplesaml_authentication_add_menu_page() {
        if (function_exists('add_menu_page')) {
                add_menu_page('simpleSAMLphp Authentication', 'simpleSAMLphp Authentication', 'manage_options',
                        basename(__FILE__), 'simplesaml_authentication_options_page');
        }
}

Oh, I see, it’s still on each blog. I think that’s an issue… it should only be on the Network Admin settings page, or you’ll have individual site admins messing around with it.

I did your patch, but I’m not finding where the configuration option setting is now, on the network backend.

I’m not sure, but I’d love a copy if you have it. I’m having issues with the one on github, but I think it’s related to the authentication function in the main plugin and not just that off shoot.

Thought I figured out the problem… it works, but it only works for pre-created users and it shouldn’t work at all. Making certain username is all lower case before doing the sanitized compare, when there aren’t any special characters in it in the first place shouldn’t Fix it.

Try this.
https://github.com/OpenConextApps/OpenConextApps-WordPress/blob/master/simplesaml-plugin/simplesamlphp-authentication.php

Someone posted that as a branch off of this plugin. I’m having a little trouble with it for logging in users who had accounts before installing the plugin but I suspect that isn’t caused by the fact that it’s doing it for the network rather than individual sites.

I temporarily wrapped the widget function in if ( is_user_logged_in() ) { }. it works, but it’s not elegant. It would be nice if this were a feature and the widget could say something like, “login to subscribe”