Initial import

Author: tvdijen

.codecov.yml

@@ -0,0 +1,11 @@
+coverage:
+  status:
+    project: yes
+
+comment:
+  layout: "diff"
+  behavior: once
+  require_changes: true
+  require_base: no
+  require_head: yes
+  branches: null

.php_cs.dist

@@ -0,0 +1,15 @@
+<?php
+$finder = PhpCsFixer\Finder::create()
+    ->in([
+        __DIR__ . '/lib',
+        __DIR__ . '/tests',
+    ])
+;
+return PhpCsFixer\Config::create()
+    ->setRules([
+        '@PSR2' => true,
+        '@PSR4' => true,
+        '@PSR5' => true,
+    ])
+    ->setFinder($finder)
+;

.travis.yml

@@ -0,0 +1,36 @@
+sudo: required
+
+language: php
+
+php:
+  - 5.5
+  - 5.6
+  - 7.0
+  - 7.1
+  - 7.2
+  - 7.3
+
+env:
+  - SIMPLESAMLPHP_VERSION=1.17.*
+  
+matrix:
+  allow_failures:
+    - php: 7.3
+
+before_script:
+  - composer require "simplesamlphp/simplesamlphp:${SIMPLESAMLPHP_VERSION}" --no-update
+  - composer update --no-interaction
+  - if [[ "$TRAVIS_PHP_VERSION" == "7.3" ]]; then composer require --dev vimeo/psalm; fi
+
+script:
+  - bin/check-syntax.sh
+  - if [[ "$TRAVIS_PHP_VERSION" == "5.6" ]]; then php vendor/phpunit/phpunit/phpunit; else php vendor/phpunit/phpunit/phpunit --no-coverage; fi
+  - if [[ "$TRAVIS_PHP_VERSION" == "7.3" ]]; then vendor/bin/psalm; fi
+
+after_success:
+  # Codecov, need to edit bash uploader for incorrect TRAVIS_PYTHON_VERSION environment variable matching, at least until codecov/codecov-bash#133 is resolved
+  - curl -s https://codecov.io/bash > .codecov
+  - sed -i -e 's/TRAVIS_.*_VERSION/^TRAVIS_.*_VERSION=/' .codecov
+  - chmod +x .codecov
+  - if [[ $TRAVIS_PHP_VERSION == "5.6" ]]; then ./.codecov -X gcov; fi
+# - if [[ "$TRAVIS_PHP_VERSION" == "5.6" ]]; then bash <(curl -s https://codecov.io/bash); fi

bin/check-syntax.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+PHP='/usr/bin/env php'
+RETURN=0
+
+# check PHP files
+for FILE in `find lib templates tests www -name "*.php"`; do
+    $PHP -l $FILE > /dev/null 2>&1
+    if [ $? -ne 0 ]; then
+        echo "Syntax check failed for ${FILE}"
+        RETURN=`expr ${RETURN} + 1`
+    fi
+done
+
+exit $RETURN

default-enable

@@ -0,0 +1,3 @@
+This file indicates that the default state of this module
+is enabled. To disable, create a file named disable in the
+same directory as this file.

docs/adfs.md

@@ -0,0 +1,83 @@
+Enables AD FS IdP
+Compatible with VS 2012 Identity and Access
+
+Basic Setup Companion based on:
+http://simplesamlphp.org/docs/stable/simplesamlphp-idp
+
+1. Enabling the Identity Provider functionality
+
+In config/config.php, the option will be:
+'enable.adfs-idp' => true
+
+2. Authentication module
+
+Follow as is.
+
+3. Configuring the authentication module
+
+In addition to enabling authentication module,  enable adfs module by creating a file named 'enable' in modules/adfs
+
+In unix from installation directory:
+touch modules/adfs/enable
+
+4. Configuring the IdP
+
+ADFS IdP is configured by metadata stored in /metadata/adfs-idp-hosted.php and metadata/adfs-sp-remote.php
+
+If they are not present, copy them from /metadata-templates to the metadata
+directory.
+
+5. Using the uri NameFormat on attributes
+
+WS-FED likes a few parameters to be very specifically named. This is
+especially true if .net clients will be treating this as a Microsoft ADFS
+IdP.
+
+The recommended settings for /metadata/adfs-idp-hosted.php is:
+
+'authproc' => array(
+        // Convert LDAP names to WS-Fed Claims.
+        100 => array('class' => 'core:AttributeMap', 'name2claim'),
+),
+
+6. Adding SPs to the IdP
+
+The minimal configuration for /metadata/adfs-sp-remote.php is:
+
+$metadata['urn:federation:localhost'] = array(
+        'prp' => 'https://localhost/adfs/ls/',
+);
+
+7. Creating a SSL self signed certificate
+
+Follow as is.
+
+8. Adding this IdP to other SPs
+
+Metadata should be available from /module.php/adfs/idp/metadata.php
+
+9. This module tries its best to emulate a Microsoft ADFS endpoint, and as
+such, it is simplest to test using a .net client.
+
+To build the test client, follow the tutorial at:
+http://code.msdn.microsoft.com/Claims-Aware-Web-d94a89ca
+
+This will build a .net app that uses a dev machine running STS (their name for
+an IdP).
+
+To point to your SimpleSamlPHP ADFS IdP, in VS 2012:
+
+a. Right-click the project in Solution Explorer and select the Identity and
+Access option.
+
+b. In the Identity and Access Window, Select Use a business identity
+provider.
+
+c. Under “Enter the path to the STS metadata document” enter the url you have
+
+from step 8. Something like
+https://.../module.php/adfs/idp/metadata.php
+
+d. Click Ok
+
+For more information in regards to .NET: http://msdn.microsoft.com/en-us/library/hh377151.aspx