Steve

SimpleShib is a WordPress plugin to authenticate users with a Shibboleth Single Sign-On infrastructure. This plugin will not work if you do not have a Shibboleth IdP and SP already configured.
When a WordPress login request is received from a user, the Shibboleth session is validated. If the session does not exist, user is redirected to the IdP login page. Once authenticated at the IdP, the user is redirected back to WordPress and logged into their local WordPress account. If a local account does not exist, one can optionally be created.
User data (login, name, and email) is updated in WordPress from the IdP data upon every login. Additionally, the user is restricted from manually changing those fields on their profile page.
On multisite instances of WordPress, SimpleShib can only be network-activated.
The plugin settings include options for autoprovisioning, custom IdP attributes, password reset/change URLs, and session initiation/logout URLs.
SimpleShib is developed on GitHub. Please submit bug reports and contributions on <a href="https://github.com/srguglielmo/SimpleShib" rel="nofollow ugc">the GitHub project page</a>. For general support and questions, please use the <a href="https://wordpress.org/support/plugin/simpleshib/" rel="ugc">WordPress support forum</a>.
This plugin is not affiliated with the Shibboleth or Internet2 organizations.

SimpleShib

SimpleShib is a WordPress plugin to authenticate users with a Shibboleth Single Sign-On infrastructure.

mitcho (Michael Yoshitaka Erlewine)

Will Norris

Brian Haas

Junaid Ahmed

michaelryanmcneill

bshelton229

deric.crago

alhrath

Dan Dalpiaz

Jonathan Champ

This plugin is designed to support integrating your WordPress site into your existing identity management infrastructure using a <a href="https://incommon.org/software/shibboleth/" rel="nofollow ugc">Shibboleth</a> Service Provider.
WordPress can be configured so that all standard login requests will be sent to your configured Shibboleth Identity Provider or Discovery Service. Upon successful authentication, a new WordPress account will be automatically provisioned for the user if one does not already exist. User attributes (username, first name, last name, display name, nickname, and email address) can be synchronized with your enterprise’s system of record each time the user logs into WordPress.
Finally, the user’s role within WordPress can be automatically set (and continually updated) based on any attribute Shibboleth provides. For example, you may decide to give users with an eduPersonAffiliation value of faculty the WordPress role of editor, while the eduPersonAffiliation value of student maps to the WordPress role contributor. Or you may choose to limit access to WordPress altogether using a special eduPersonEntitlement value.
<h4>Contribute on GitHub</h4>
This plugin is actively maintained by <a href="https://profiles.wordpress.org/michaelryanmcneill" rel="nofollow ugc">michaelryanmcneill</a> and the WordPress community, <a href="https://github.com/michaelryanmcneill/shibboleth" rel="nofollow ugc">using GitHub</a>. Contributions are welcome, via pull request, <a href="https://github.com/michaelryanmcneill/shibboleth" rel="nofollow ugc">on GitHub</a>. Issues can be submitted <a href="https://github.com/michaelryanmcneill/shibboleth/issues" rel="nofollow ugc">on the issue tracker</a>.

Shibboleth

We had no trouble installing and configuring the plugin. When we ran into an issue, it was no trouble to interact with the plugin authors. 

This plugin just works

Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider.

SimpleShib vs Shibboleth