SimpleSamlPHP auth plugin

This is a merge request related to this TIC that I created to add support for SimpleSamlPHP: #4365.

I wasn't sure whether I should edit the original TIC or write everything here, so below is all the information needed to understand the code and set up the test environment. The issue contains more general information. If I did anything wrong, please let me know, and I will fix it.

Files

• StudipAuthSimpleSamlPHP.php - contains the plugin
• logout.php - modified public/logout.php for support of SingleLogout (I just reused code that was used for CAS logout)
• config_defaults.inc.php - configuration examples (same as for other auth plugins)

prerequisites

• SimpleSamlPHP installed on the machine in its default dirrectory (can be changed in plugin code)
  • use other session than php_session as this would interfere with Stud.IP session

Testing enviroment

On this branch I have prepared testing enviroment with mocksaml as an IdP. All you have to do to set it up is start docker-compose.yml (docker-compose up) and Stud.IP with SimpleSamlPHP support will be available at http://localhost:8032. Then you can login with mocksaml IdP by using 'federated login' link.

config/config_defaults.inc.php

@@ -175,6 +175,7 @@ LdapReader      authentication using an LDAP server, this plugin binds to the se
 CAS             authentication using a central authentication server (CAS)
 Shib            authentication using a Shibboleth identity provider (IdP)
 OAuth2          authentication using an OAuth2 identity provider
+SimpleSamlPHP authentication using a SimpleSamlPHP identity provider (IdP)
 
 If you write your own plugin put it in studip-htdocs/lib/classes/auth_plugins
 and enable it here. The name of the plugin is the classname excluding "StudipAuth".
@@ -191,6 +192,7 @@ $STUDIP_AUTH_PLUGIN[] = "Standard";
 // $STUDIP_AUTH_PLUGIN[] = "Shib";
 // $STUDIP_AUTH_PLUGIN[] = "IP";
 // $STUDIP_AUTH_PLUGIN[] = 'OAuth2';
+// $STUDIP_AUTH_PLUGIN[] = 'SimpleSamlPHP';
 
 $STUDIP_AUTH_CONFIG_STANDARD = ["error_head" => "intern"];
 
@@ -327,6 +329,16 @@ $STUDIP_AUTH_CONFIG_OAUTH2 = [
         'auth_user_md5.EMail'    => ['callback' => 'getUserData', 'map_args' => 'email'],
     ],
 ];
+
+$STUDIP_AUTH_CONFIG_SIMPLESAMLPHP = [
+    'sp_name'           => 'default-sp',
+    'path_to_simple_saml_php' => '/var/simplesamlphp/src/_autoload.php' // path to _autoload.php of SimpleSamlPHP library
+    'user_data_mapping' => [
+        'auth_user_md5.Email'    => ['callback' => 'getUserData', 'map_args' => 'email'],
+        'auth_user_md5.Nachname' => ['callback' => 'getUserData', 'map_args' => 'firstName'],
+        'auth_user_md5.Vorname'  => ['callback' => 'getUserData', 'map_args' => 'lastName'],
+    ],
+];
 */
 
 //some additional authification-settings