Finally ldap_sso has test coverage over it's primary behavior in an end-to-end test. It should now be possible to more easily reproduce real-world issues with this and provide a more stable integration.
Most importantly in this release the seamless mode has been completely rewritten, the sso_login_running cookie is no longer needed and we are not doing the redirect to the login controller anymore but rather doing it internally. This should reduce a large number of issues and problems users have had and simplify maintenance.
This release is recommended for all sites and works with LDAP 3.0-beta4.
It contains a refactoring of the LoginController and associated processes which should now log in more robustly.
Note that underlying configuration storage has been updated significantly and you need to reexport your configuration after running updb. Please verify your configuration and explore the newly available configuration options in the administration form.
Fixes a minor form issue for SSO excluded paths. Separate release provided because it can override your existing exclude path settings if you save the form as such.
This release includes the move of the SSO out of ldap_authorization to a separate form in this module and removes LdapAuthenticationConf() and dependent legacy classes.
SSO now has a distinct callback in ldap_authentication and no longer injects into the user_login_form process.