davitec/dv-sso-auth

SSO authentication for TYPO3 CMS with Shibboleth-focused defaults

1.0.2 2026-04-01 14:09 UTC

Requires

• php: ^8.1 || ^8.2 || ^8.3 || ^8.4 || ^8.5
• typo3/cms-backend: ^12.4 || ^13.4
• typo3/cms-core: ^12.4 || ^13.4
• typo3/cms-extbase: ^12.4 || ^13.4
• typo3/cms-frontend: ^12.4 || ^13.4

Requires (Dev)

• phpunit/phpunit: ^10.5 || ^11.0
• typo3/testing-framework: ^8.0 || ^9.0

GPL-2.0-or-later

• Davitec GmbH

README

SSO Auth is a TYPO3 extension for SSO-based authentication with Shibboleth-focused defaults.

Features

• SSO authentication service for TYPO3 frontend and backend login flows.
• Backend login provider with dedicated SSO button.
• Frontend login plugin with login/logout flow.
• Optional FE/BE user auto-import and update from IdP attributes.
• FE/BE group mapping from affiliation attributes.
• Middleware to recover from stale FE sessions during SSO login.

Key configuration

Main settings are defined in ext_conf_template.txt:

• enableBE / enableFE
• enableAutoImport / enableBackendAutoImport
• backendAutoImportGroup
• storagePid
• loginHandler / logoutHandler
• remoteUser, mail, displayName, eduPersonAffiliation
• onlySsoBE, forceSSL

Tests

Unit tests are located in Tests/Unit and cover core helper logic:

• ExtensionSettingsFactory
• ServerVariableResolver
• SsoRequestDetector
• AffiliationParser
• ShibbolethTargetBuilder

Run (once PHPUnit is available in your environment):

vendor/bin/phpunit -c packages/dv-sso-auth/phpunit.xml.dist

Run functional tests:

vendor/bin/phpunit \
  --bootstrap vendor/typo3/testing-framework/Resources/Core/Build/FunctionalTestsBootstrap.php \
  -c packages/dv-sso-auth/Tests/phpunit.xml \
  --testsuite Functional