MetalArend / authentication-bundle

        $username = $token->getUsername();

        try {

            if ($user instanceof UserInterface) {

                $token->setUser($this->userProvider->refreshUser($user));

                $user = $token->getUser();

            } else {

                $user = $this->userProvider->loadUserByUsername($username);

            }

            if (empty($user) || !$user instanceof UserInterface) {

                $this->log(sprintf('User not found for username "%s"', $username));

                throw new AuthenticationException('Shibboleth authentication failed.');

            $this->log(sprintf('User found for username "%s": %s', $username, $user));

            foreach ($token->getRoles() as $role) {

                if ($role instanceof SwitchUserRole) {

                    $source = $role->getSource();

                    $sourceUser = $source->getUser();

                    if ($sourceUser instanceof UserInterface) {

                        $source->setUser($this->userProvider->refreshUser($sourceUser));

                    }

                }

            }

        } catch (UsernameNotFoundException $notFound) {

            $this->log(sprintf('User not found for username "%s": %s', $username, $notFound->getMessage()));