Beth, I don't believe you solved the Shibboleth solution it looks like.  Because of the the way MojoPortal lays out its login pages, into their own folder, you should be able to use one of the methods for securing content with Shibboleth, and that is by simple URL/Folder security. You can use UF's Shibboleth for IIS to lock down the /wwwroot/secure folder so you can't access the files in that folder without Shibboleth authentication.  Now that doesn't get you the whole way, not really logged into MojoPortal yet, but this might help Joe look at an additional authentication method. The key perhaps for Joe, is that once you perform a Shibboleth authentication, you will have access to the username, email address, and Active Directory groups users belong to, all from the easy to use ServerVariables:

http://www.it.ufl.edu/identity/shibboleth/technicalcodeexamples.html

I believe Joe's code is pretty close to all existing, just needs to be massaged together a little differently. With Active Directory authentication available, perhaps instead of getting the user authenticated from an LDAP connection to AD, he could grab the username, etc., from ServerVariables that was put there from the Shibboleth login.

No idea... just putting stuff in Joe's good mind :-)

A bit more info on Shibboleth.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRequestMapHowTo

http://www.it.ufl.edu/identity/shibboleth/

With a significant number of universities moving to Shibboleth, perhaps there's enough here to get something started for you (us). 

-Joe G.

P.S. Love you work you've done with MojoPortal at UF. (not a WP fan here :-)

Joe,

I'll work on getting a test mojoPortal site running with Shibboleth, might take a couple of weeks (maintenance windows for the Shibboleth work). I've got a decent .NET coder here on the team that is interested in helping, too.  We'll see what we can do.  Type at you soon.

Joe Gasper