PHPackages niif/shib-auth-bundle - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. niif/shib-auth-bundle ActiveLibrary[Authentication & Authorization](/categories/authentication) niif/shib-auth-bundle ===================== Shibboleth based (federated SAML) user authentication bundle v1.2.8(6y ago)02.2k3[1 issues](https://github.com/NIIF/ShibAuthBundle/issues)[6 PRs](https://github.com/NIIF/ShibAuthBundle/pulls)MITPHP Since May 6Pushed 3y ago6 watchersCompare [ Source](https://github.com/NIIF/ShibAuthBundle)[ Packagist](https://packagist.org/packages/niif/shib-auth-bundle)[ RSS](/packages/niif-shib-auth-bundle/feed)WikiDiscussions master Synced 2w ago READMEChangelog (10)Dependencies (3)Versions (18)Used By (0) The bundle provides the authentication security token to users who authenticate via Shibboleth SP apache implementation. Then you can implement access control as symfony does. You *must* implement your own user provider, this bundle not working without them. Install ======= [](#install) Install the bundle by composer `composer require niif/shib-auth-bundle` Update `app/AppKernel.php` ``` $bundles = array( ... new Niif\ShibAuthBundle\NiifShibAuthBundle(), ... ); ``` Configure the shibboleth bundle. update your `app/config/config.yml` ``` ... niif_shib_auth: ~ # niif_shib_auth: # baseURL: "%shib_auth_base_url%" # optional, have default value: /Shibboleth.sso/ # sessionInitiator: "%shib_auth_session_initiator%" # optional, have default value: Login # logoutPath: "%shib_auth_logout_path%" # optional, have default value: Logout # logoutReturnPath: "%shib_auth_logout_return_path%" # optional, have default value: "/" you should use absolute url, or named symfony route too. # usernameAttribute: "%shib_auth_username_attribute%" # optional, have default value: REMOTE_USER # moduleAttribute: "%shib_auth_module_attribute%" # optional, the name of the server variable for ensure shibboleth session exist default: HTTP_SHIB_APPLICATION_ID ... ``` then add new firewall rule in `app/config/security.yml` ``` ... providers: ... shibboleth: id: shibboleth.user.provider ... ... firewalls: ... main: guard: authenticators: - niif_shib_auth.shib_authenticator logout: path: /logout target: / invalidate_session: true success_handler: niif_shib_auth.shib_authenticator ... ``` You should create a simple the logout action in any controller: ``` /** * @Route("/logout") * @Template() * @return \Symfony\Component\HttpFoundation\RedirectResponse */ public function logoutAction() { return $this->redirect($this->generateUrl('logged_out')); } ``` Impersonate =========== [](#impersonate) The authenticator support the impersonate feature. in `app/config/security.yml` ``` ... providers: ... shibboleth: id: shibboleth.user.provider in_memory: memory: ~ ... ... firewalls: ... switch_user: { provider: in_memory } main: guard: authenticators: - niif_shib_auth.shib_authenticator logout: path: /logout target: / invalidate_session: true success_handler: niif_shib_auth.shib_authenticator ... ``` Simulate shibboleth authentication in development environment ============================================================= [](#simulate-shibboleth-authentication-in-development-environment) When you develop an application you shoud simulate shibboleth authentication anyhow. You can do it in apache config, after enable *headers* and *env* modules: ``` Alias /my_app /home/me/my_app/web Options Indexes FollowSymLinks AllowOverride All Require all granted SetEnv Shib-Person-uid myuid SetEnv Shib-EduPersonEntitlement urn:oid:whatever RequestHeader append Shib-Identity-Provider "fakeIdPId" RequestHeader append eppn "myeppn" ``` ### Health Score 34 — LowBetter than 74% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity17 Limited adoption so far Community17 Small or concentrated contributor base Maturity72 Established project with proven stability Bus Factor1 Top contributor holds 89.5% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~127 days Recently: every ~244 days Total 12 Last Release 2357d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/dbd1543568948482a6229c1c07ddcc76c71254d0d5c63c024a967222857c33bd?d=identicon)[gyufi](/maintainers/gyufi) ![](https://www.gravatar.com/avatar/b8bab3c1b234f0732268e672b7acc23549b3819e445c2fddc7de385dbac40e4d?d=identicon)[kukkjanos](/maintainers/kukkjanos) ![](https://www.gravatar.com/avatar/58cf0b44aa083da212f27d6c89a3ba7b0716079d39f2d2d845d4997d61e93571?d=identicon)[northway](/maintainers/northway) --- Top Contributors [![szabogyula](https://avatars.githubusercontent.com/u/3406217?v=4)](https://github.com/szabogyula "szabogyula (17 commits)")[![dorion](https://avatars.githubusercontent.com/u/169303?v=4)](https://github.com/dorion "dorion (1 commits)")[![northway](https://avatars.githubusercontent.com/u/3431401?v=4)](https://github.com/northway "northway (1 commits)") ### Embed Badge ![Health badge](/badges/niif-shib-auth-bundle/health.svg) ``` [![Health](https://phpackages.com/badges/niif-shib-auth-bundle/health.svg)](https://phpackages.com/packages/niif-shib-auth-bundle) ``` ### Alternatives [tg/tgwebvalid An easy way to validate Telegram Login Widget and Telegram Mini App users on your website using PHP 6827.5k1](/packages/tg-tgwebvalid)[vitalybaev/laravel5-dkim Laravel 5/6 package for signing outgoing messages with DKIM. 3163.1k](/packages/vitalybaev-laravel5-dkim)[kissdigital-com/apple-sign-in-client-secret-generator PHP package for generating 'client secret' for Sign In with Apple 2125.5k](/packages/kissdigital-com-apple-sign-in-client-secret-generator)[denniseilander/laravel-passport-scopes-restriction Restrict scopes for different Laravel Passport clients. 1636.3k](/packages/denniseilander-laravel-passport-scopes-restriction) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)