v2.0
michaelryanmcneill
released this
16 Jan 20:42
·
178 commits
to master
since this release
Changes include:
- Changed the way we check for Shibboleth attributes. Now, by default, we only check standard environment variables for Shibboleth attributes. For most users, no additional configuration will be necessary. If you are using a specialized server configuration, such as a Shibboleth Service Provider on a reverse proxy or a server configuration that results in environment variables being sent with the prefix REDIRECT_, you should instead select the option specific to your server configuration. Selecting the "Redirected Environment Variables" option will look for attributes in environment variables prefixed with
REDIRECT_
while selecting the "HTTP Headers" option will look for attributes in environment variables (populated by HTTP Headers) prefixed withHTTP_
. Most users should be fine leaving the default option selected; thanks to @jrchamp for reporting. - Changed the default behavior to not automatically update user roles.
- Allow options to be defined via constants. Documentation has been added to the "FAQ" section of the WordPress.org plugins page.
- Allow automatic and manual merging of local WordPress accounts with Shibboleth accounts. This prevents a collision from occurring if the Shibboleth email attribute matches an email that already exists in the
wp_users
table. This is configurable by an administrator. - Changed the options page to utilize a more modern design centered around tabs.
- Added signifcant customizations to the login page to bring it more in-line with WordPress.com Single Sign On.
- Disabled the sending of an email notifying user's that their email had changed when the Shibboleth plugin updates user attributes to prevent user confusion; props @jrchamp.
- Removed the
shibboleth-mu.php
file as it is no longer relevant.