Shibboleth Plugin in OJS 3

[carola]

Hi,

I have some questions concerning the shibboleth plugin in OJS 3.

1. In multi-journal installations, I can enable the plugin and open the plugin settings on the site (admin) level. In single-journal installations, I cannot enable the plugin on the journal level. I get a notification that the plugin is enabled, but the checkbox is not checked and I cannt access the settings. A bug?

2. Do I still need to set up the entries in config.inc.php in OJS 3?

3. The version number does not seem to be correct: shibboleth/version.xml at stable-3_1_2 · pkp/shibboleth · GitHub

4. In OJS 2, implicit_auth (in config.inc.php) could be set to “optional”. ojs/config.TEMPLATE.inc.php at ojs-stable-2_4_8 · pkp/ojs · GitHub. Has this option been removed in OJS 3? ojs/config.TEMPLATE.inc.php at stable-3_1_2 · pkp/ojs · GitHub

best,
Carola

[ctgraham]

@carola

• In multi-journal installations, I can enable the plugin and open the plugin settings on the site (admin) level. In single-journal installations, I cannot enable the plugin on the journal level. I get a notification that the plugin is enabled, but the checkbox is not checked and I cannt access the settings. A bug?

Yes, and apparently longstanding one: Plugin tickbox not getting enabled · Issue #3 · pkp/shibboleth · GitHub

@carola

• Do I still need to set up the entries in config.inc.php in OJS 3?

I don’t think so. I only see references to plugin settings in the Handler.

@carola

• The version number does not seem to be correct: https://github.com/pkp/shibboleth/blob/stable-3_1_2/version.xml#L16

Alec bumped this to a 1.0 release in master, but we probably don’t want to package it as a 1.0 release until the above bug is fixed.

@carola

• In OJS 2, implicit_auth (in config.inc.php) could be set to “optional”. ojs/config.TEMPLATE.inc.php at ojs-stable-2_4_8 · pkp/ojs · GitHub. Has this option been removed in OJS 3? ojs/config.TEMPLATE.inc.php at stable-3_1_2 · pkp/ojs · GitHub

Yes, this plugin is “all or nothing” currently.

[carola]

Thanks, Clinton!
…

[Stevel]

I see a comment on Plugin tickbox not getting enabled · Issue #3 · pkp/shibboleth · GitHub that mentions the issue was closed on the shemgp/ojs_ldap_plugin fork. Will it be brought into the Shibboleth plugin?

[ctgraham]

There is currently work going on to improve this plugin:

Optional option for Shibboleth in OJS 3

Hi there, We’re looking to upgrade from OJS 2 to OJS 3, but we really need to have Shibboleth as optional, allowing local and Shibboleth logins. I see from this post (https://forum.pkp.sfu.ca/t/shibboleth-plugin-in-ojs-3/53442/2) that as of May 2019 the Shibboleth plugin is currently ‘All or Nothing’. My question is, is there currently anyone working on enabling the optional setting in the Shibboleth plugin? If not, could I take the task and implement it? One of my coworkers worked on the orig…

If this bug with enabling the plugin in a single journal instance is still present in the Shibboleth plugin, @lmeerwood might want to be aware of this pitfall.

[lmeerwood]

I have just integrated the fix from the LDAP plugin for single journals into my fork of the Shibboleth plugin. From what I can see with my testing it works fine. I’m about to do a pull request back into the Shibboelth repo.

[Ian_Caldwell]

Are the instructions for Shibboleth updated for OJS?
https://docs.pkp.sfu.ca/admin-guide/en/single-signon

We have set implicit_auth = On but there is no change on the login page for OJS, and no calls to our Shibboleth install, so we are clearly missing an important step!

[asmecher]

Hi @Ian_Caldwell,

I see you’ve also posted about this here:

Shibboleth, implicit_auth = On but login page does not change

We have followed the instructions for using Shibboleth with OJS. We are using OJS 3.3.0.3. We have been unable to get the login page to change. In the file config.inc.php we have set implicit_auth = On - and we have tested that our OJS installation is using the current config.inc.php - but there is no change and the Shibboleth login is not triggered. There are no logs of calls from OJS to our Shibboleth. What are we missing? https://docs.pkp.sfu.ca/admin-guide/en/single-signon

Let’s continue the conversation there; it’s best not to post the same question in several places, in the interests of keeping the forum organized.

Thanks,
Alec Smecher
Public Knowledge Project Team