This assumes that shibboleth is installed on the server running the rails application. It should be possible to use SAML to authenticate by shibboleth without installing it on the server.
gem 'omniauth-shibboleth'
and then bundle
In this example, the user id field is the employee number provided by shibboleth
Rails.application.config.middleware.use OmniAuth::Builder do