Daniel Bachhuber

Chris Reynolds

John Spellman

Pantheon Systems

Josh Koenig

<p>SAML authentication for WordPress, using the bundled OneLogin SAML library or optionally installed <a href="https://simplesamlphp.org/" rel="nofollow ugc">SimpleSAMLphp</a>. OneLogin provides a SAML authentication bridge; SimpleSAMLphp provides SAML plus a variety of other authentication mechanisms. This plugin acts as a bridge between WordPress and the authentication library.</p>
<p>If your organization uses Google Apps, <a href="https://pantheon.io/docs/wordpress-google-sso/" rel="nofollow ugc">integrating Google Apps with WP SAML Auth</a> takes just a few steps.</p>
<p>The standard user flow looks like this:</p>
<ul>
<li>User can log in via SAML using a button added to the standard WordPress login view.</li>
<li>When the button is clicked, the user is handed off to the authentication library. With OneLogin, the user is redirected to the SAML identity provider. With SimpleSAMLphp, the user is redirected to the SimpleSAMLphp install.</li>
<li>Once the user is authenticated with the identity provider, they’re redirected back to WordPress and signed in to their account. A new WordPress user will be created if none exists (although this behavior can be disabled).</li>
<li>When the user logs out of WordPress, they are also logged out of the identity provider.</li>
</ul>
<p>A set of configuration options allow you to change the plugin’s default behavior. For instance, <code>permit_wp_login=>false</code> will force all authentication to go through the SAML identity provider, bypassing <code>wp-login.php</code>. Similiarly, <code>auto_provision=>false</code> will disable automatic creation of new WordPress users.</p>
<p>See installation instructions for full configuration details.</p>
<h3>WP-CLI Commands</h3>
<p>This plugin implements a variety of <a href="https://wp-cli.org" rel="nofollow ugc">WP-CLI</a> commands. All commands are grouped into the <code>wp saml-auth</code> namespace.</p>
<pre><code>$ wp help saml-auth

NAME

  wp saml-auth

DESCRIPTION

  Configure and manage the WP SAML Auth plugin.

SYNOPSIS

  wp saml-auth <command>

SUBCOMMANDS

  scaffold-config      Scaffold a configuration filter to customize WP SAML Auth usage.
</code></pre>
<p>Use <code>wp help saml-auth <command></code> to learn more about each command.</p>
<h3>Contributing</h3>
<p>See <a href="https://github.com/pantheon-systems/wp-saml-auth/blob/master/CONTRIBUTING.md" rel="nofollow ugc">CONTRIBUTING.md</a> for information on contributing.</p>


WP SAML Auth

doid

<p><strong>WordPress Passwordless SingleSignOn</strong> with our  <a href="https://onboardingidentity.com/" rel="nofollow ugc">SAML Passwordless Single Sign On Plugin</a> allows access without the need to type in account and password. The functionality is available to access WordPress console and a sample page for end user identification is available too.<br />
All you need is to scan a QR code which is valid one time only, and has a very limited time to live; super secure, super easy – no configuration needed.</p>
<p>The companion app for mobile is available for <a href="https://play.google.com/store/apps/details?id=com.onboardingidentity.onid" rel="nofollow ugc">Android</a> or <a href="https://apps.apple.com/app/onboardingidentity/id6738704920" rel="nofollow ugc">iOS</a></p>
<h3>External services</h3>
<p>This plugin connects to an API to obtain an OTP in a QRcode shape, it’s needed to login to the admin console.</p>
<p>It does NOT send any user info, nor system info, to the external service. It just receive the email address of the user who acquired the QRcode through a dedicated mobile app on smartphone.<br />
This service is provided by an ‘onboardingIdentity’ subsidiary: terms of use, privacy policy are available on <a href="https://onboardingidentity.com/aaa/support.html" rel="nofollow ugc">support</a> and <a href="https://onboardingidentity.com/aaa/service.html" rel="nofollow ugc">service</a>.</p>


onID SSO by SAML 2.0

WordPress Passwordless login just by scanning a one time QR code; no configuration needed. For admin console and end users too, of course.

WP SAML Auth vs onID SSO by SAML 2.0