Freemius

Cloud Infrastructure Services

<h4>WP Cloud SSO – SAML Single Sign On (WordPress Login Security)</h4>
WordPress Single Sign On by Cloud Infrastructure Services Ltd. Our <a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/" rel="nofollow ugc">WordPress SSO</a> plugin offers WordPress SAML SSO Single Sign On for your WordPress logins. Login to WordPress (WP) using Azure AD, Azure B2C, Okta, ADFS, Keycloak, OneLogin, Salesforce, Google Apps (G Suite), Shibboleth, Auth0 and other IdPs (Identity Providers). It acts as SAML SP (Service Provider) which can be configured to establish a trust between our WordPress SSO plugin and your IDP to securely authenticate and enable SSO / Login for your users into the WordPress (WP) site.
The following video explains the features of WP Cloud SSO plugin.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/T-flVowguAE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>WP Cloud SSO – WordPress SSO Features</h3>
<ul>
<li>Unlimited SSO Authentications With your SAML IdP. Auto redirect your user logins to WordPress, authenticating against your IDP for SSO authentication. Automate the user experience with auto redirect, no need for username / password for a Single Sign On experience using your IDP to authorise the logins.</li>
<li>SAML Attribute Mapping Map user attributes from your identity provider to your WordPress user profiles. For example (Name, Username, Email, Job Title, Department, Telephone, City, Profile Picture, & more)</li>
<li>Protect WordPress, Auto-Redirect to IDP Protect your WordPress site (Auto-Redirect to IdP). Only authorised users can login to WordPress. Restrict WordPress to only logged in users by redirecting the users to your IdP if logged in session is not found</li>
<li>WordPress Role Mapping Automatically assign WordPress roles to users based on SAML IDP group membership. Restrict access to WordPress based on IDP Groups. Making WordPress secure and controlling WordPress user permissions.</li>
<li>Multiple WordPress Environments Support Manage multiple WordPress environments (Prod, Dev, Staging, Test). Migrate between test/staging environments keeping your SSO config and attribute mappings inplace. Supports platforms like (WP Engine, Pantheon, Sub domains & more).</li>
<li>WordPress Single Signout Logs the user out of your Identity Provider on logout from WordPress site acting as Service Provider (SP) and terminates current login session on both ends.</li>
<li>SAML Avatar Profile Pic Sync If you’re using Office 365, you have the option to sync your AzureAD / Office365 profile pics to your WordPress users avatar</li>
<li>Auto-sync IdP Configuration from metadata Easily upload your IDP metadata XML file, making it easier to sync your SAML metadata to WordPress</li>
<li>Widget, Shortcode to add SAML IDP Login Link Customise your login page with our WordPress widget login customiser. Use shortcode to place login links anywhere on WordPress</li>
<li>Multiple SAML IDP Support Add as many SAML Identiry providers to allow your users to login from any IDP</li>
</ul>
<h4>Free Version Features</h4>
<ul>
<li>Unlimited Authentications With 1 SAML Identity provider</li>
<li>Basic Attribute Mapping Basic Attribute Mapping (Email, First Name, Last Name, Display Name)</li>
<li>Widget, Shortcode to add SAML IDP Login Link</li>
<li>Protect WordPress, Auto-Redirect to IDP</li>
</ul>
<h4>Premium Version Features 10 Day Free Trial</h4>
<ul>
<li>All features from Free Version</li>
<li>Advanced Attribute Mapping Map any SAML user attributes to your WordPress users, for example (Job Title, Department, Telephone, City, Employee ID, etc etc)</li>
<li>WordPress Role Mapping Use IDP groups to map WordPress roles based on group membership (Default, Administrator, Editor, Author, Contributor, Subscriber). Allowing you to secure access to WordPress logins.</li>
<li>SAML Single Logout Allows the user to logout of your IDP when logging out of WordPress and terminates current login session on both ends.</li>
<li>Auto-sync IdP Configuration from metadata Sync IDP metadata to WordPress automatically.</li>
<li>Dedicated WordPress Support Team Access to our WordPress support team if you have any questions or assistance setting up WP Cloud SSO.</li>
</ul>
<h4>Enterprise Version Features 10 Day Free Trial</h4>
<ul>
<li>All features from Free Version & Premium</li>
<li>Multiple Environments Support / Migration (Dev, Staging, Prod) Add Multiple Environments SSO support (Staging, Dev, Test). Merge SSO Settings / Copy between evironments. Also works with (WP Engine, Pantheonsite, Kinsta, sub domains & Other WordPress Managed Platforms)</li>
<li>Multiple SAML IDP Support (Add unlimited SAML IDPs) Add as many IDPs as needed, no restrictions. Add unlimited amount of SAML identity providers.</li>
<li>Sync SAML User Pics to WordPress Avatar Sync supported SAML provider user pictures to WordPress user avatars. For example Office 365 user profile pictures.</li>
</ul>
<h3>List of Supported SAML Identity Providers</h3>
WP Cloud SSO supports the following SAML Single Sign On Providers. Full setup instructions to enable SSO for your WordPress Logins.
<ul>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/office-365-azure-ad-sso/" rel="nofollow ugc">WordPress Azure AD SSO</a> (Setup Azure AD SAML SSO for your WordPress Azure AD Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-office-365-login-wp-cloud-sso/" rel="nofollow ugc">WordPress Office 365 Login</a> (Setup Office 365 SAML SSO for your WordPress Office 365 Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/adfs-sso-for-wordpress/" rel="nofollow ugc">WordPress ADFS SSO</a> (Setup Microsoft ADFS SAML SSO for your WordPress ADFS Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-single-sign-on-using-azure-b2c-saml-login/" rel="nofollow ugc">WordPress Azure B2C SSO</a> (Setup Azure B2C SAML SSO for your WordPress Azure B2C Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-sso-using-salesforce-saml-login-idp/" rel="nofollow ugc">WordPress Salesforce SSO</a> (Setup Salesforce SAML SSO for your WordPress Salesforce Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-google-apps-login-single-sign-on-saml-idp/" rel="nofollow ugc">WordPress Google Apps / GSuite SSO</a> (Setup Google Apps / GSuite SAML SSO for your WordPress Google Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-single-sign-on-using-onelogin-as-saml-idp/" rel="nofollow ugc">WordPress OneLogin SSO</a> (Setup OneLogin SAML SSO for your WordPress OneLogin Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-sso-using-okta-as-saml-idp/" rel="nofollow ugc">WordPress Okta SSO</a> (Setup Okta SAML SSO for your WordPress Okta Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-sso-using-keycloak-as-saml-idp/" rel="nofollow ugc">WordPress KeyCloak SSO</a> (Setup KeyCloak SAML SSO for your WordPress KeyCloak Logins)</li>
<li><a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/wordpress-sso-using-auth0-saml-idp-wp-auth0-login/" rel="nofollow ugc">WordPress Auth0 SSO</a> (Setup Auth0 SAML SSO for your WordPress Auth0 Logins)</li>
</ul>
<blockquote>
Check our website for more details on <a href="https://cloudinfrastructureservices.co.uk/wordpress-sso-single-sign-on/" rel="nofollow ugc">WordPress Single Sign On</a> using WP Cloud SSO plugn and setup documentation.
</blockquote>

Cloud SAML SSO – Single Sign On Login


I am very happy with the Cloud SSO Single Sign On WordPress plugin, especially because of the outstanding customer support. Andrew and the team provided fast, prompt responses to all my questions, making the experience seamless and stress-free. Their dedication to helping customers is truly impressive. Highly recommend this plugin for anyone who values excellent and responsive support.


Fast and Highly Responsive Customer Support

WordPress SSO using SAML IDPs to enable single sign on using Azure AD, Office 365, Okta, ADFS, KeyCloak, OneLogin, Salesforce, Google Apps Gsuite

secureparrot

SecurePie SSO SAML is a SAML 2.0 Single Sign-On (SSO) plugin for WordPress that provides enterprise SSO login, SAML login, and federated login via any SAML 2.0 Identity Provider — including Azure AD (Entra ID), Okta, Google Workspace, OneLogin, ADFS, Auth0, PingFederate, and Keycloak.
Whether you need SAML SSO for an intranet, an enterprise SSO portal for customers, or federated authentication for your team, this plugin turns your WordPress site into a SAML Service Provider with zero external dependencies.
SecurePie SSO SAML allows you to configure your WordPress site as a SAML 2.0 Service Provider (SP), enabling Single Sign-On with any SAML 2.0 compliant Identity Provider (IdP) such as Azure AD, Okta, Google Workspace, OneLogin, ADFS, and more.
This is a zero-dependency plugin — it uses only PHP’s built-in <code>dom</code>, <code>openssl</code>, and <code>zlib</code> extensions. No Composer, no external libraries, no conflicts with other plugins.
<h4>Features</h4>
<ul>
<li>Full SAML 2.0 SSO — AuthnRequest generation, Response validation, user provisioning</li>
<li>SP Metadata Endpoint — Auto-generated metadata XML for easy IdP configuration</li>
<li>IdP Metadata Parsing — Import IdP settings from a metadata URL or XML file</li>
<li>XML Digital Signature Verification — RSA-SHA256 and RSA-SHA1 support</li>
<li>Security Hardened — XXE prevention, signature wrapping attack protection, replay prevention, audience validation</li>
<li>Attribute Mapping — Map SAML attributes to WordPress user fields (username, email, first name, last name, display name)</li>
<li>Role Mapping — Assign WordPress roles based on IdP group/role attributes</li>
<li>Auto User Provisioning — Automatically create WordPress users on first SSO login</li>
<li>SSO Login Button — Customizable SSO button on the WordPress login page</li>
<li>Force SAML Login — Optionally redirect all login attempts through the IdP</li>
<li>Single Logout (SLO) — Send LogoutRequest to the IdP when users log out of WordPress</li>
<li>Test Configuration — Validate your SSO setup and see returned attributes before going live</li>
<li>HTTP-Redirect and HTTP-POST Bindings — Support for both SAML binding types</li>
<li>Clean Admin Interface — Professional tabbed settings page with copy-to-clipboard functionality</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Enterprise SSO — Centralize WordPress login through your corporate Identity Provider so employees use one set of credentials.</li>
<li>SAML Login for Customer Portals — Let B2B customers sign in to your WordPress site using their own SAML SSO identity.</li>
<li>Federated Login Across Sites — Use a single SAML IdP to federate authentication across multiple WordPress installs.</li>
<li>SSO Authentication for Membership Sites — Replace WordPress’s default signin flow with SAML SSO login from Azure AD, Okta, or Google Workspace.</li>
<li>Intranet Single Sign-On — Add WordPress to your existing SSO ecosystem alongside other SAML 2.0 enabled apps.</li>
</ul>
<h4>Supported Identity Providers</h4>
<ul>
<li>Microsoft Azure Active Directory (Entra ID)</li>
<li>Okta</li>
<li>Google Workspace</li>
<li>OneLogin</li>
<li>Salesforce</li>
<li>Auth0</li>
<li>PingFederate</li>
<li>Shibboleth</li>
<li>ADFS (Active Directory Federation Services)</li>
<li>Keycloak</li>
<li>Any SAML 2.0 compliant IdP</li>
</ul>
<h4>Setting up SAML SSO with Azure AD (Entra ID)</h4>
Connecting WordPress to Azure AD / Entra ID for SAML SSO with SecurePie takes about ten minutes:
<ol>
<li>In the WordPress admin, open SecurePie SSO → Service Provider and copy the SP Entity ID and ACS URL.</li>
<li>In Azure, create a new Enterprise Application of type “Non-gallery application” and open its Single sign-on → SAML blade.</li>
<li>Paste the SP Entity ID into Azure’s Identifier (Entity ID) field and the ACS URL into the Reply URL (Assertion Consumer Service URL) field.</li>
<li>Under “SAML Signing Certificate”, download the Federation Metadata XML (or copy the Login URL and certificate).</li>
<li>Back in WordPress, open Identity Provider → Quick Setup and either upload the metadata XML or paste the metadata URL. SecurePie auto-fills Entity ID, Login URL and X.509 Certificate.</li>
<li>Assign your Azure users / groups to the Enterprise Application, then run Test Configuration in WordPress to confirm attributes flow through correctly before enabling the SSO button on the login page.</li>
</ol>
<h4>Setting up SAML SSO with Okta</h4>
Okta-to-WordPress SAML SSO with SecurePie follows the same pattern:
<ol>
<li>In the WordPress admin, open SecurePie SSO → Service Provider and copy the SP Entity ID, ACS URL and Single Logout URL.</li>
<li>In the Okta admin, go to Applications → Create App Integration → SAML 2.0, give the app a name, and continue to step 2 of Okta’s wizard.</li>
<li>Paste the SP Entity ID into Okta’s Audience URI (SP Entity ID) field and the ACS URL into the Single Sign-on URL field.</li>
<li>Configure Okta’s attribute statements to send <code>email</code>, <code>firstName</code>, <code>lastName</code>, and optionally a <code>groups</code> claim for role mapping.</li>
<li>After saving, open the Okta Sign On tab, click View SAML setup instructions, and copy the Identity Provider Single Sign-On URL, Identity Provider Issuer and the X.509 Certificate.</li>
<li>Back in WordPress, paste these into Identity Provider Setup (or use Okta’s metadata URL). Run Test Configuration to verify the SAML assertion before going live.</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>PHP 7.4 or higher</li>
<li>PHP extensions: <code>dom</code>, <code>openssl</code>, <code>zlib</code> (enabled by default on most hosts)</li>
<li>WordPress 5.8 or higher</li>
</ul>
<h3>External Services</h3>
This plugin implements the SAML 2.0 protocol, which requires communication with an external Identity Provider (IdP) that is configured by the site administrator. No data is sent to any external service without the administrator explicitly configuring the connection.
<h4>Identity Provider Communication</h4>
When a user initiates SSO login, the plugin redirects the user’s browser to the Identity Provider’s SAML Login URL (configured by the administrator). The following data is sent as part of the standard SAML 2.0 AuthnRequest:
<ul>
<li>The Service Provider Entity ID (your site’s identifier)</li>
<li>The Assertion Consumer Service URL (your site’s callback URL)</li>
<li>A unique request ID for replay prevention</li>
</ul>
The Identity Provider then authenticates the user and sends a SAML Response back to your site containing the user’s identity attributes (such as email, name, and group membership).
This communication is entirely between your WordPress site and the IdP that you configure. No data is sent to SecurePie or any other third party.
The terms of service and privacy policy for the Identity Provider depend on which provider you choose to configure (e.g., Microsoft Azure AD, Okta, Google Workspace). Please consult your Identity Provider’s documentation for their specific terms.
<h4>IdP Metadata Import (Optional)</h4>
The plugin can optionally fetch Identity Provider metadata from a URL provided by the administrator. This is a one-time server-to-server request to retrieve the IdP’s public configuration (Entity ID, Login URL, X.509 Certificate). No user data is sent during this request.
<h4>SAML Attribute Namespace URIs</h4>
The plugin references standard SAML attribute namespace URIs (e.g., <code>http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress</code>) as identifiers within SAML assertions. These are XML namespace strings used for attribute identification and are not HTTP requests to external services.

SecurePie SSO SAML — Single Sign-On, SAML Login & Enterprise SSO for WordPress

SAML 2.0 SSO for WordPress. Enterprise login with Azure AD, Okta, Google Workspace, OneLogin, ADFS & any SAML 2.0 Identity Provider.

Cloud SAML SSO – Single Sign On Login vs SecurePie SSO SAML — Single Sign-On, SAML Login & Enterprise SSO for WordPress