Hi to all,
I'm Marco Malavolti from GARR (Italian NREN) and I'm trying to use Shibboleth extension for Mediawiki to set user's rights with groups.
https://www.mediawiki.org/wiki/Extension:Shibboleth
I have successfully configured the extension to enable the SSO and it works, but I don't know why the following configuration doesn't set privilegies/groups to logged users:
wfLoadExtension( 'Shibboleth' );
$wgShibboleth_Username = 'eppn'; $wgShibboleth_Email = 'mail'; $wgShibboleth_DisplayName = "cn"; $wgShibboleth_Logout_Base_Url = "https://sp.example.org"; $wgShibboleth_Logout_Target_Url = '/index.php/Pagina_principale';
$wgShibboleth_GroupMap = [ 'attr_name' => 'unscoped-affiliation', 'sysop' => 'member', 'bureaucrat' => 'member', 'interface-admin' => 'member', ];
'unscoped-affiliation' is the eduPersonAffiliation attribute. That name is what Shibboleth set by default.
I'm using the latest version of the extension provided here:
https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/Shibbole...
Can you help me to understand how to provide group's permission to my logged users, please?
Thank you so much for any help you can provide!