From the Shibboleth homepage:
The Shibboleth System is a standards based, open source software package for web single sign-on across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.
Yes, the plugin provides a number of new actions and filters that can
be used to extend the functionality of the plugin. Search shibboleth.php for
occurances of the function calls apply_filters and do_action to find them
all. Then write a new plugin that makes use of the hooks. If your require
additional hooks to allow for extending other parts of the plugin, please
notify the plugin author.
Before extending the plugin in this manner, please ensure that it is not actually more appropriate to add this logic to Shibboleth. It may make more sense to add a new attribute to your Shibboleth Identity Provider's attribute store (e.g. LDAP directory), or a new attribute definition to the Identity Provider's internal attribute resolver or the Shibboleth Service Provider's internal attribute extractor. In the end, the Shibboleth administrator will have to make that call as to what is most appropriate.




