Authress

This plugin upgrades the standard WordPress login forms with one powered by <a href="https://authress.io" rel="nofollow ugc">Authress</a> that enables:
<ul>
<li>Universal authentication
<ul>
<li>Over 40 social login providers</li>
<li>Enterprise connections (SAML, Office 365, Google Apps, and more)</li>
<li>Customer configurable SSO connections</li>
</ul>
</li>
<li>Ultra secure
<ul>
<li>User identity</li>
<li>Security access policies</li>
<li>Mitigate brute force attacks</li>
</ul>
</li>
</ul>
Which includes: 
– Azure AD and B2C 
– Office 365 
– WSO2 
– Ping Identity 
– Okta 
– Auth0 
– Keyclock 
– LinkedIn 
– Salesforce 
– Twitter 
– Google Workspace 
– Yahoo 
– Salesforce 
– Hubspot 
– Steam 
– Slack 
– And any custom OAuth2.1, OpenID, or SAML provider
With SSO Login, you can automatically support business and enterprise customers that have important security requirements for their users to use your site and platform.
<h3>Technical Notes</h3>
By using this plugin you are delegating the site authentication and profile handling to Authress. That means that you won’t need to use the WordPress database to authenticate users and the default WordPress login forms will be upgraded to support the new SSO Login flow.
Please see our <a href="https://authress.io/knowledge-base/" rel="nofollow ugc">knowledge base</a> for more information on how Authress authenticates and manages your users.
<h4>Migrating Existing Users</h4>
Authress allows multiple authentication providers. You can have social providers like Facebook, Twitter, Google+, a database of users and passwords (just like WordPress), or you can use an Enterprise directories like, Office365, Google Apps, SAML, OpenID, OAuth2.1. All those authentication providers are supported and more.
<h3>How to customize this plugin</h3>
This plugin provides extension points to make it easier to configure it exactly as you need. Check out the full docs: 
* <a href="https://github.com/Authress/wordpress-sso-login/blob/main/docs/customizations.md" rel="nofollow ugc">SSO Login customizations</a>

SSO Login – Universal (OAuth + SAML)

SSO Login provides user login, business authentication, SSO, Social login, and Single Sign-On for all sites.

Overt Software

EZPZ SAML SP turns your wordpress website into a fully functioning SAML 
service provider. EZPZ SP then allows you to use your existing Identity 
Provider (IdP) to authenticate to your wordpress website. We support all 
known SAML 2.0 IdPs such as: ADFS, Athens (Eduserv), AzureAD, Bitium, 
Centrify, Google Apps, Okta, OneLogin, OpenAM, Oracle, Ping Identity, 
Salesforce, Shibboleth, SimpleSAMLphp, WSO2 and many more.
In the premium version of the plugin you are also able to use IP Based 
authentication. The premium version also allows you to configure 
authentication to multiple IdPs instead of a single IdP.
You have the power to either switch on authentication for the entire 
wordpress website to force Single Sign on site wide. Or you can choose to 
enable per post / page authentication and require login for particular 
posts and pages.
If you require any Single Sign On help or have any questions about the 
plugin please email support@ezpzsp.com
<h4>Free Features</h4>
<ol>
<li>SAML Authentication</li>
<li>Automatic IDP metadata pull (not cached, pulled on every login)</li>
<li>Upload IDP metadata file</li>
<li>Protect whole site</li>
<li>Restrict access to posts or pages</li>
<li>Redirect wordpress login page to IDP</li>
<li>Direct IDP login link that can be used anywhere (not currently shown in 
front-end)</li>
<li>Login via institution link on footer of wordpress login page</li>
<li>Auto fill username and optionally email from SAML attributes</li>
<li>SAML Single Logout</li>
<li>Automatic initial certificate generation</li>
<li>Custom SP certificate support</li>
<li>Auto creates missing users on login</li>
<li>Advanced security options</li>
</ol>
<h4>Premium Features</h4>
<ol>
<li>Option to disable user auto creation</li>
<li>Option to append institution name to user to avoid duplicates across IDPs</li>
<li>Options to select SAML Request binding type</li>
<li>Customized Role Mapping / Set users default role on creation</li>
<li>IDP Metadata caching</li>
<li>Custom Attribute Mapping (Any attribute which is stored in user-meta 
table)</li>
<li>Sub-site specific SSO for Multisite</li>
<li>Bulk update to enable/disable post and page restrictions</li>
<li>Granular access controls per institution</li>
<li>Auto login via IP</li>
<li>Ability to restrict posts or pages to specific institutions and/or 
specific groups?</li>
<li>File upload protection (new file manager so you can protect PDFs, images 
etc)</li>
</ol>

EZPZ SAML SP Single Sign On (SSO)

athens, sso, okta, onelogin, simplesamlphp Donate link: http://www.ezpzsp.com Requires at least: 4.9.8 Tested up to: 6.6.2 Requires PHP: 7.

SSO Login – Universal (OAuth + SAML) vs EZPZ SAML SP Single Sign On (SSO)