onelogin

<p>This SAML plugin eliminates passwords and allows you to authenticate WordPress users (typically editors) against your existing Active Directory or LDAP server as well increase security using YubiKeys or VeriSign VIP Access via OneLogin. OneLogin is pre-integrated with thousands of apps and handles all of your SSO needs in the cloud and behind the firewall.</p>
<ul>
<li>Eliminate passwords in WordPress</li>
<li>Allow users to sign into WordPress with their <em>Active Directory</em> or <em>LDAP</em> credentials</li>
<li>Give users one-click access from your intranet</li>
<li>Increase security using browser PKI certificates or two-factor authentication from <em>Yubico</em> or <em>VeriSign</em></li>
<li>Easily prevent access from former employees and contractors</li>
</ul>
<p>If you used this plugin before 2.2.0 with just-in-time provision active, Read: https://wpvulndb.com/vulnerabilities/8508<br />
To mitigate that bug, place the script at the root of wordpress and execute it (later remove it) https://gist.github.com/pitbulk/a8223c90a3534e9a7d5e0a93009a094f</p>


OneLogin SAML SSO

This plugin provides single sign-on via SAML and gives users one-click access to their WordPress accounts from identity providers like OneLogin.

dreitierci

schakko

dreitier

tobi823

medan123

neosit

FatSquirrel

<p><em>Next Active Directory Integration</em> allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory. <em>NADI</em> ist a complete rewrite of its predecessor Active Directory Integration and therefore an own plugin.<br />
You can easily import users from your Active Directory into your WordPress instance and keep both synchronized through <em>Next Active Directory Integration’s</em> features.</p>
<p>Even if <em>NADI</em> is available for free we hope you purchase a plan to let us continue the work on Next Active Directory Integration.<br />
You can purchase commercial support plans at <a href="https://www.active-directory-wp.com/shop-overview/" rel="nofollow ugc">https://www.active-directory-wp.com/shop-overview/</a>. The support plans give you access to our premium extensions and guarantee an ongoing development of the plug-in.</p>
<h4>Features</h4>
<ul>
<li>Authenticating WordPress users against one or multiple AD Server</li>
<li>Authorizing users by Active Directory group memberships</li>
<li>Managing Active Directory authentication for WordPress Multisite installations</li>
<li>Single Sign On with Kerberos sponsored by <a href="http://colt.net" rel="nofollow ugc">Colt Technology Services</a> and <a href="https://app.digitalelite.co.uk/" rel="nofollow ugc">Digital Elite</a></li>
<li>Automatically create and update WordPress users based upon their Active Directory membership</li>
<li>Mapping of Active Directory security groups to WordPress roles</li>
<li>Protection against brute force password hacking attacks</li>
<li>User and/or admin e-mail notification on failed login attempts</li>
<li>Multi-language support (at the moment only English is included)</li>
<li>Determining WordPress display name from Active Directory attributes</li>
<li>Synchronizing Active Directory attributes and WordPress user meta information in both ways</li>
<li>Embed customized Active Directory attributes in WordPress user’s profile</li>
<li>Enable/disable password changes for local (non-Active Directory) WordPress users</li>
<li>Disable user accounts in WordPress if they are disabled in Active Directory.</li>
<li>Set users local WordPress password on first and/or on every successful login</li>
<li>Option to disable fallback to local (WordPress) authentication.</li>
<li>Support for Active Directory forest environments.</li>
<li>and much much more</li>
</ul>
<h4>Premium Extensions</h4>
<p>As an owner of a valid support plan you have access to the following premium extensions:</p>
<ul>
<li>Profile Pictures: Synchronize profile photos from Active Directory to WordPress without a 3rd party plug-in</li>
<li>BuddyPress profile photo: Synchronize profile photos from Active Directory to BuddyPress</li>
<li>Buddy Press simple attributes: Synchronize attributes from Active Directory/NADI to BuddyPress’ custom profiles</li>
<li>Login with Ultimate Member: Let UM users log in by using NADI</li>
<li>Login with WooCommerce: Let WooCommerce users log in by using NADI</li>
<li>WP-CLI: Execute common NADI tasks (Sync to WordPress, Sync to AD) with help of WP-CLI</li>
<li>Active Directory Forest: Be able to use one WordPress instance with your whole Active Directory forest environment</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress since 5.6</li>
<li>PHP >= 8.2</li>
<li>LDAP support</li>
<li>OpenSSL Support for TLS (recommended)</li>
</ul>


Next Active Directory Integration

I had some issues finding out how to configure it correctly. I usually login with "INTERN\john.doe", but a format like this was not valid. I found out that I had to use "john.doe@intern.example.com" and to add the two suffixes "@intern.example.com" as well as "@example.com". I activated the automatic user creation and all worked easily. Awesome work!

Once you figure out your configuration, it work perfectly!

Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory.

OneLogin SAML SSO vs Next Active Directory Integration