safire-ac-za/simplesamlphp-module-thissdisco

SimpleSAMLphp module for thiss.io/SeamlessAccess

dev-main 2025-05-06 16:01 UTC

Requires

• php: ^8.1
• npm-asset/bootstrap: ^5.3.3
• npm-asset/fortawesome--fontawesome-free: ^6.6.0
• npm-asset/theidentityselector--thiss-ds: ^2.1.52
• simplesamlphp/assert: ^1.6.0
• simplesamlphp/composer-module-installer: ^1.3.5
• simplesamlphp/simplesamlphp: >=2.3.0 <2.4.0
• simplesamlphp/simplesamlphp-assets-jquery: ^2.3.0

Requires (Dev)

• simplesamlphp/simplesamlphp-test-framework: ^1.7.0

MIT

• Guy Halse

• SAML2
• simplesamlphp
• discovery
• thissio
• seamlessaccess

README

SimpleSAMLphp module implementing The Identity Selector discovery service

This module aims to provide a SimpleSAMLphp-compatible discovery service that implements the of the RA-21 best practices and provides a user interface that will seem familiar to people who've used the SeamlessAccess https://seamlessaccesss.org/ discovery service.

It's discovery user interface widget is derived from The Identity Selector's thiss-js discovery service, albeit reimplemented in PHP & Twig for compatibility with SimpleSAMLphp. The widget can be embedded into a standard SimpleSAMLphp theme or it can be separately themed to look like the SeamlessAccess / <use.thiss.io> user interface.

The client side is implemented using the thiss-ds-js client libraries. These are directly imported without changes, and thus the entire interface should be compatible with SeamlessAccess's persistance service. See the advanced integration notes for how this might be achieved.

The module has a built-in JSON-only metadata query (MDQ) service. The MDQ service returns discojson compatible with PyFF (which was, itself, derived from an earlier implementation). It implements PyFF's search extensions (the q= and entity_filter= query parameters), and it implemenets the thiss-mdq "trustinfo" extensions to support a SeamlessAccess-compatible entity selection language (the entityID= and trustProfile= query parameters). There is one additional query parameter, debug=, to override the Accept checks and pretty-print the JSON output.