Steve

SimpleShib is a WordPress plugin to authenticate users with a Shibboleth Single Sign-On infrastructure. This plugin will not work if you do not have a Shibboleth IdP and SP already configured.
When a WordPress login request is received from a user, the Shibboleth session is validated. If the session does not exist, user is redirected to the IdP login page. Once authenticated at the IdP, the user is redirected back to WordPress and logged into their local WordPress account. If a local account does not exist, one can optionally be created.
User data (login, name, and email) is updated in WordPress from the IdP data upon every login. Additionally, the user is restricted from manually changing those fields on their profile page.
On multisite instances of WordPress, SimpleShib can only be network-activated.
The plugin settings include options for autoprovisioning, custom IdP attributes, password reset/change URLs, and session initiation/logout URLs.
SimpleShib is developed on GitHub. Please submit bug reports and contributions on <a href="https://github.com/srguglielmo/SimpleShib" rel="nofollow ugc">the GitHub project page</a>. For general support and questions, please use the <a href="https://wordpress.org/support/plugin/simpleshib/" rel="ugc">WordPress support forum</a>.
This plugin is not affiliated with the Shibboleth or Internet2 organizations.

SimpleShib

SimpleShib is a WordPress plugin to authenticate users with a Shibboleth Single Sign-On infrastructure.

Overt Software

EZPZ SAML SP turns your wordpress website into a fully functioning SAML 
service provider. EZPZ SP then allows you to use your existing Identity 
Provider (IdP) to authenticate to your wordpress website. We support all 
known SAML 2.0 IdPs such as: ADFS, Athens (Eduserv), AzureAD, Bitium, 
Centrify, Google Apps, Okta, OneLogin, OpenAM, Oracle, Ping Identity, 
Salesforce, Shibboleth, SimpleSAMLphp, WSO2 and many more.
In the premium version of the plugin you are also able to use IP Based 
authentication. The premium version also allows you to configure 
authentication to multiple IdPs instead of a single IdP.
You have the power to either switch on authentication for the entire 
wordpress website to force Single Sign on site wide. Or you can choose to 
enable per post / page authentication and require login for particular 
posts and pages.
If you require any Single Sign On help or have any questions about the 
plugin please email support@ezpzsp.com
<h4>Free Features</h4>
<ol>
<li>SAML Authentication</li>
<li>Automatic IDP metadata pull (not cached, pulled on every login)</li>
<li>Upload IDP metadata file</li>
<li>Protect whole site</li>
<li>Restrict access to posts or pages</li>
<li>Redirect wordpress login page to IDP</li>
<li>Direct IDP login link that can be used anywhere (not currently shown in 
front-end)</li>
<li>Login via institution link on footer of wordpress login page</li>
<li>Auto fill username and optionally email from SAML attributes</li>
<li>SAML Single Logout</li>
<li>Automatic initial certificate generation</li>
<li>Custom SP certificate support</li>
<li>Auto creates missing users on login</li>
<li>Advanced security options</li>
</ol>
<h4>Premium Features</h4>
<ol>
<li>Option to disable user auto creation</li>
<li>Option to append institution name to user to avoid duplicates across IDPs</li>
<li>Options to select SAML Request binding type</li>
<li>Customized Role Mapping / Set users default role on creation</li>
<li>IDP Metadata caching</li>
<li>Custom Attribute Mapping (Any attribute which is stored in user-meta 
table)</li>
<li>Sub-site specific SSO for Multisite</li>
<li>Bulk update to enable/disable post and page restrictions</li>
<li>Granular access controls per institution</li>
<li>Auto login via IP</li>
<li>Ability to restrict posts or pages to specific institutions and/or 
specific groups?</li>
<li>File upload protection (new file manager so you can protect PDFs, images 
etc)</li>
</ol>

EZPZ SAML SP Single Sign On (SSO)

athens, sso, okta, onelogin, simplesamlphp Donate link: http://www.ezpzsp.com Requires at least: 4.9.8 Tested up to: 6.6.2 Requires PHP: 7.

SimpleShib vs EZPZ SAML SP Single Sign On (SSO)