shib_auth 6.x-4.0-rc1

This is a release candidate. Community tests are very much appreciated.

Upgrade instructions from versions 3.x:

1. Read the documentation
2. Ensure that you can login as administrator using a password. Upgrading/configuring the new version might fail if you're using the module to log in.
3. Back up your database.. We can't stress this enough.
4. Run update.php for updating database tables.

Bug fixes with -rc1:

• #608368: Misinterpretation of $base_url
• #647208: logout sends all users to Shibboleth redirect URL
• #778074: shib_auth doesn't call user_module_invoke('login')
• #754186: redundant authmap delete in hook_user
• #712102: Adhere to Drupal coding standards
• #813484: improper use of Forms API
• Fix user consent when custom form is enabled
• Fix improper use of form elements

New features with -rc1:

• #950130: Allow forced redirect after login

New features since 3.x

• Allow specifying Drupal username, thus support opaque identifiers like edupersonTargetedId
• Support for sticky rules (roles saved permanently to the users' profile)
• Basic support for account linking
• Basic support for getting user consent on personal data
• Support for isPassive and forceAuthn session initiation
• Support for redirecting users to HTTPS on login

Fixes since 3.x:

• The module now works with caching enabled
• Code refactoring

A big thanks to everyone who reported bugs, offered patches or otherwise contributed to the development of the new major release.