chamilo-lms2/main/auth/sso/sso_server_test.php

<?php
/*
  SSO sample

  This is the "server" of my institution/university authentification "code"

  1. Active all the SSO option in your Chamilo installation: main/admin/settings.php?category=Security
  2. Copy the main/auth/sso/sso.class.php file to something else representing your remote system, like
     sso.Remote.class.php and modify the class name in soo.Remote.class.php to "ssoRemote"
  3. Insert the following setting manually in your database (change the selected_value from 'Remote'
     to the name of your system (used in the filename and classname above).
     INSERT INTO settings_current (variable, subkey, type, category, selected_value, title, comment, scope, subkeytext)
     VALUES ('sso_authentication_subclass',NULL,'textfield','Security','Remote','SSOAuthSubClassTitle','SSOAuthSubClassComment',NULL,NULL);
  4. Make sure this script is located in the index page of the server you fill in the "Domain of the Single Sign On server" Chamilo setting
     For example this script must be located in example.com/index.php if you set the "Domain of the Single Sign On server" = example.com
  5. Create a user in chamilo and in your external system with login = "joe" and password = "doe"
  6. Remember this is just a sample! Check the chamilo drupal extension for more information:
     http://drupal.org/node/817682
  7. When activating the settings in step 1, the principal Chamilo file main/inc/local.inc.php will load the class main/auth/sso.[class.php library
 *   that will redirect to this field with some parameters.
 *
*/


exit; //Uncomment this to execute the page


//After you located this file in you new domain and you set the settings in step 2,
//this page will be loaded when entering to the Chamilo site if the SSO option was set in step 1.

//Getting the chamilo server
$my_chamilo_server = filter_xss($_SERVER['HTTP_HOST']);

$account = array();

if (isset($_SESSION['my_server_user_session'])) {
    //validate if the user is already logged in my external system in order to redirect to chamilo
}

//Login process

if (isset($_POST['user']) && isset($_POST['password'])) {

    //1. Your Server validations
    $validate = validate_user($_POST['user'], $_POST['password']);

    if ($validate) {

        /* 2.Get the chamilo username and password from your system or from webservices */

        $account['username'] = 'jbrion525'; //username in Chamilo
        $account['password'] = sha1(sha1('jbrion525')); //encrypted password with assuming that the first encrypted method is sha1 in chamilo

        $master_auth_uri = $my_chamilo_server.'/?q=user';

        // Creating an array cookie that will be sent to Chamilo
        $sso = array(
            'username'          => $account['username'],
            'secret'            => $account['password'],
            'master_domain'     => $my_chamilo_server,
            'master_auth_uri'   => $master_auth_uri,
            'lifetime'          => time() + 3600,
            'target'            => filter_xss($_GET['sso_target']),
        );

        $cookie = base64_encode(serialize($sso));
        $url = chamilo_sso_protocol().$master_auth_uri;
        $params = 'sso_referer='.urlencode($url).'&sso_cookie='.urlencode($cookie);
        $final_url = filter_xss($_GET['sso_referer']).'?'.$params;

        //If your user exists redirect to chamilo and set the account in a session to check it later
        $_SESSION['my_server_user_session'] = $account;

        //3. After validating the user in the server and getting and setting the user data of chamilo in the sso_cookie variable:
        // Redirect to this URL
        header('Location: '.$final_url);
        exit;
    } else {
        echo '<h2>Wrong parameters</h2>';
    }
}

if (isset($_POST['logout'])) {
    //echo do something to logout
}

function validate_user($user, $pass) {
    return true;
}
function filter_xss($val) {
    //do some cleaning
    return $val;
}

function chamilo_sso_protocol() {
    //get the sso_protocol from chamilo using webservices
    return 'http://';
}
?>
<html>
    <form method="post">
        User <input name="user"/>
        Pass <input name="password" />
        <input type="submit" value="Login">
    </form>
</html>