=== SAML Single Sign On – SSO Login ===
Contributors: miniOrange
Donate link: https://plugins.miniorange.com
Tags: SSO, SAML, Single Sign On, Azure AD, Okta Login
Requires at least: 3.7
Tested up to: 6.9
Requires PHP: 5.6
Stable tag: 5.4.0
License: Expat
License URI: https://plugins.miniorange.com/mit-license

SAML SSO (Single Sign On) for WordPress Login with Okta, Entra ID, Azure AD/B2C, G-Suite, Shibboleth, OneLogin, Keycloak, Salesforce [24/7 Support]

== Description ==
**Simplify WordPress Login Experience With Our SAML Single Sign On (SSO) Plugin**

With the <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso?utm_source=readme&utm_medium=saml_lp&utm_campaign=wp_saml_sso" target="_blank">**miniOrange WordPress SAML SSO plugin**</a>, you can enable Single Sign On (SSO) for your WordPress site. This means users can sign in with their existing accounts from Identity Providers (IDPs) like <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-ad?utm_source=readme&utm_medium=azure_guide&utm_campaign=microsoft_azure" target="_blank">**Microsoft Azure AD/ Entra ID**</a>, <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-google-apps?utm_source=readme&utm_medium=g_suite_guide&utm_campaign=google_workspace" target="_blank">**Google Workspace**</a>, <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-okta?utm_source=readme&utm_medium=okta_guide&utm_campaign=okta" target="_blank">**Okta**</a>, <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-salesforce?utm_source=readme&utm_medium=salesforce_guide&utm_campaign=salesforce" target="_blank">**Salesforce**</a>, <a href="https://plugins.miniorange.com/keycloak-single-sign-on-wordpress-sso-saml?utm_source=readme&utm_medium=keycloak_guide&utm_campaign=keycloak" target="_blank">**Keycloak**</a>, <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-shibboleth-2?utm_source=readme&utm_medium=shibboleth2_guide&utm_campaign=shibboleth" target="_blank">**Shibboleth**</a>, <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-onelogin?utm_source=readme&utm_medium=onelogin_guide&utm_campaign=onelogin" target="_blank">**OneLogin**</a>, ADFS, and others without creating separate WordPress usernames and passwords.

The plugin makes your WordPress site function as a SAML-compliant Service Provider (SP) by using the SAML 2.0 protocol to securely exchange authentication data with your chosen Identity Provider (IDP). Once users are authenticated by the IDP, they automatically gain access to your WordPress site and its resources. 

**Our WP SSO plugin is designed for you if you need:**

* **Instant Secure Authentication**
Users access WordPress immediately using their existing Identity Provider (IDP) credentials without managing WordPress-specific passwords.

* **Centralized Access Management**
Control everyone’s WordPress access through your Identity Provider (IDP) security policies.

* **Organization-Only Access**
Restrict WordPress access exclusively to verified employees through Identity Provider (IDP) authentication and MFA.

* **Smart User Provisioning**
Automatically create WordPress accounts and assign roles based on Identity Provider (IDP) groups and user data.

* **Reduced Administrative Overhead**
Eliminate manual user creation, password resets, role assignments, and access management tasks.

* **Flexibility Across Different Identity Providers (IDP)**
Our plugin works with 50+ IDPs. Enterprises can set up Azure AD login into WordPress for employees, while universities use WordPress Okta SSO, Google Workspace (G Suite) SSO, Shibboleth SSO, OneLogin SSO, or any other SAML IDPs of their choice.


**Quick Links:** <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso?utm_source=readme&utm_medium=saml_lp&utm_campaign=official_website" target="_blank">🌐Official Website</a> | <a href="https://plugins.miniorange.com/wordpress-saml-guides?utm_source=readme&utm_medium=all_guides&utm_campaign=setup_guide" target="_blank">🛠️Setup Guide</a> | <a href="https://sandbox.miniorange.com/?utm_source=readme&utm_medium=sandbox&utm_campaign=free_trial&referer=https://plugins.miniorange.com/wordpress-single-sign-on-sso&_gl=1*1qh3q8j*_gcl_au*OTY0NTc5OTcxLjE3NTQ0NzkzNjYuMzM4MTExMzY5LjE3NTQ4ODY5MzAuMTc1NDg4Njk1Ng..*_ga*MjAxMDI4NjQxOC4xNzQ2NjExODg4*_ga_CR5T2LG2WB*czE3NTU2ODU3NTAkbzIzMiRnMCR0MTc1NTY4NTc1MCRqNjAkbDAkaDE2NjIwMjc4ODU.*_ga_EZQF54NCSZ*czE3NTU2ODU3NTAkbzY0NiRnMCR0MTc1NTY4NTc1MCRqNjAkbDAkaDQxNTcyMjEzNA.." target="_blank">🎁Free Full-Feature Trial</a> | <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso?utm_source=readme&utm_medium=pricing_lp&utm_campaign=pricing_section#pricing" target="_blank"> 💎Pricing Plans</a> | <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso-integrations?utm_source=readme&utm_medium=wp_integrations_lp&utm_campaign=integrations_addon" target="_blank">🧩Integrations & Addons</a> | <a href="https://plugins.miniorange.com/wordpress-azure-office365-integrations?utm_source=readme&utm_medium=azure_365_lp&utm_campaign=office_365_integrations" target="_blank">📧 Office 365 Integrations</a> | <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso?utm_source=readme&utm_medium=contact_us&utm_campaign=support#contact-us" target="_blank">🤝Support</a>

== WordPress SAML SSO Login Explained in Minutes ==
https://youtu.be/Lk6KEKcPTWk?si=eNIt5xW4R-HvSDcn 

== WP SAML SSO Plugin Supports All SAML Identity Providers ==
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-ad?utm_source=readme&utm_medium=supported_idps&utm_campaign=azure_ad_sso" target="_blank">Azure AD SSO (Microsoft Entra ID)</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-okta?utm_source=readme&utm_medium=supported_idps&utm_campaign=login_okta_sso" target="_blank">Login with Okta SSO</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-google-apps?utm_source=readme&utm_medium=supported_idps&utm_campaign=gsuite" target="_blank">Google Workspace/GSuite</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-salesforce?utm_source=readme&utm_medium=supported_idps&utm_campaign=salesforce" target="_blank">Login with Salesforce</a>
* <a href="https://plugins.miniorange.com/keycloak-single-sign-on-wordpress-sso-saml?utm_source=readme&utm_medium=supported_idps&utm_campaign=keycloak" target="_blank">Keycloak</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-adfs?utm_source=readme&utm_medium=supported_idps&utm_campaign=adfs" target="_blank">ADFS</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-b2c?utm_source=readme&utm_medium=supported_idps&utm_campaign=azure_ad_b2c" target="_blank">Login with Azure AD B2C</a>
* <a href="https://plugins.miniorange.com/wordpress-office-365-single-sign-on-sso-login?utm_source=readme&utm_medium=supported_idps&utm_campaign=office365" target="_blank">Office 365</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-onelogin?utm_source=readme&utm_medium=supported_idps&utm_campaign=onelogin" target="_blank">OneLogin SSO</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-auth0?utm_source=readme&utm_medium=supported_idps&utm_campaign=auth0" target="_blank">Auth0</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-pingone?utm_source=readme&utm_medium=supported_idps&utm_campaign=pingone" target="_blank">PingOne</a>
* <a href="https://plugins.miniorange.com/single-sign-on-sso-between-two-wordpress-sites?utm_source=readme&utm_medium=supported_idps&utm_campaign=2wordpress_sites" target="_blank">WordPress</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-miniorange?utm_source=readme&utm_medium=supported_idps&utm_campaign=miniorange" target="_blank">miniOrange</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-oracle-enterprise-manager?utm_source=readme&utm_medium=supported_idps&utm_campaign=oracle" target="_blank">Oracle</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-jumpcloud?utm_source=readme&utm_medium=supported_idps&utm_campaign=jumpcloud" target="_blank">JumpCloud</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-for-wordpress-using-cyberark?utm_source=readme&utm_medium=supported_idps&utm_campaign=cyberark" target="_blank">CyberArk</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-duo?utm_source=readme&utm_medium=supported_idps&utm_campaign=duo" target="_blank">Duo</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-secureauth?utm_source=readme&utm_medium=supported_idps&utm_campaign=secureauth" target="_blank">SecureAuth</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-absorb-lms?utm_source=readme&utm_medium=supported_idps&utm_campaign=absorb_lms" target="_blank">Absorb LMS</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-adfs?utm_source=readme&utm_medium=supported_idps&utm_campaign=windows" target="_blank">Windows</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-shibboleth-2?utm_source=readme&utm_medium=supported_idps&utm_campaign=shibboleth2" target="_blank">Shibboleth SSO</a>
* <a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-custom-idp?utm_source=readme&utm_medium=supported_idps&utm_campaign=customidp" target="_blank">Any Custom IDP Supporting SAML</a>
* <a href="https://plugins.miniorange.com/wordpress-saml-guides?utm_source=readme&utm_medium=supported_idps&utm_campaign=and_more" target="_blank">And more</a>

== Set Up Our WP Single Sign On (SSO) Plugin in Three Easy Steps ==

**Step 1: Install Our WordPress SAML SSO Plugin**
Download the **WordPress SAML SSO (Single Sign On) plugin** from the WordPress plugin directory and install it on your WordPress site.

**Step 2: Share Your WordPress Site’s Metadata from the WP SAML Plugin with the Identity Provider (IDP)**
Provide the **Service Provider (SP)**, i.e., your WordPress site’s metadata URL or file, to your **Identity Provider (IDP)** to register your WordPress site as a trusted **Service Provider (SP)**.

**Step 3: Import Your Identity Provider’s (IDP) Metadata into the Plugin**
Next, upload the IDP’s metadata URL or file to your WordPress site in the plugin settings to enable secure SAML authentication.

That's it! Your WordPress site is now secured with enterprise-grade Single Sign On (SSO) authentication. You can verify the connection by using the **Test Configuration button** in the plugin.

== Watch Our Complete Step-by-Step Installation Video for WP SSO Login ==

Follow along with our detailed video walkthrough to see exactly how each step works and ensure your SAML SSO login is configured correctly from start to finish.

https://youtu.be/gilfhNFYsgc?feature=shared 
 
== Here to Support You, Always ==
Whether you have questions about setup, pricing, or how the plugin works, our expert team is available 24/7 to assist you. Simply reach out to <a href="mailto:samlsupport@xecurify.com" target="_blank">**samlsupport@xecurify.com**</a>, and we will ensure you receive timely and reliable guidance.

== Features of Our WordPress SAML Single Sign On (SSO) Plugin ==
**Unlimited User Authentications:** Allows an unlimited number of users to log in through SAML SSO with your IDP authentication while maintaining optimal site performance during peak traffic.

**Auto Login:** Automatically logs users into WordPress if they have an active IDP session, without requiring them to re-enter the IDP credentials.

**Force Authentication:** Ensures that users authenticate through the IDP each time they log in to the WordPress site, regardless of any active IDP session.

**Complete Site Protection:** Secures your site's frontend pages/posts and backend WP-Admin pages behind Single Sign On by redirecting all users to IDP if an active session is not found on the IDP. You can add another security layer using Media Restriction and REST API authentication.

**Automatic User Creation:** Creates new WordPress user accounts automatically on the user’s first Single Sign On login if no account exists by syncing their profile details from the IDP.

**Account Linking:** Enables users to log into their existing WordPress accounts via their IDP credentials by matching their username or email in WordPress and IDP. This ensures no duplicate accounts are created. 

**Just-in-Time (JIT) Profile Updation:** Updates WordPress user accounts at each Single Sign On login by syncing data from IDP. It maps basic attributes (username, email, first name, last name, etc.) and advanced/custom attributes (department, phone, job title, employee ID, etc.) to maintain accurate user profiles.

**Role-based Access:** Assigns WordPress roles such as Administrator, Editor, Author, Contributor, or Subscriber to users during WP SSO login. The role assignment is based on the group information provided by the IDP.

**Custom Login Buttons and Shortcodes:** Adds SSO login buttons to the WordPress login page or any page on the site using widgets and shortcodes. You can change the text, font, color, and size of these buttons to match your site’s design.

**Single Logout (SLO):** Terminates a user's session on the WordPress site and the IDP simultaneously when logging out of either of them.

**Login Using Multiple IDPs:** Allows users to authenticate with different Identity Providers (IDPs) when logging into WordPress. You can also set up email domain mapping so users are automatically directed to the right IDP. For example, an organization can easily set up Azure AD SSO, Okta SSO, or any other IDP for employees, and use Google Workspace SSO for partners or vendors.

**Certificate Sync and Multiple Certificates:** Automatically syncs X.509 certificates from the Identity Provider (IDP), managing rollover, replacement, and addition without disrupting the SSO connection. It also supports multiple active certificates from the same IDP, allowing WordPress to work with custom setups or environments where more than one certificate is in use.

**SSO on Multisite Networks:** Applies one SSO configuration to all subsites in a WordPress multisite network. This centralizes SSO management, so you do not need to configure each subsite individually.

**Single & Multi‑Tenant Azure AD Login:** Connects both single-tenant (one directory) and multi-tenant (multiple directories) Azure AD or Office 365 to WordPress. Users from different tenants can log in to WordPress through Azure AD SSO using their existing accounts.

**Cross-Environment Deployment:** Supports multiple environments such as Development, Test, and Production, allowing IT teams to configure SSO once and maintain consistent settings across all instances.

**WP‑CLI Support:** Provides WP‑CLI commands for activating licenses, configuring WP SSO settings, importing or exporting configurations, and updating the plugin. All key SSO functions can be managed from the command line without using the WordPress dashboard.

== Extend Your Single Sign On Experience With Our Addons ==  

<a href="https://plugins.miniorange.com/wordpress-user-provisioning?utm_source=readme&utm_medium=addons&utm_campaign=user_provisioning" target="_blank">**Real-time SCIM User Provisioning:**</a> Syncs user records between the IDP and WordPress in real time when the user is created, updated, or removed to maintain accurate data and strengthen security and efficiency.

<a href="https://plugins.miniorange.com/wordpress-page-restriction?utm_source=readme&utm_medium=addons&utm_campaign=page_restriction" target="_blank">**Page and Post Restriction:**</a> Controls access to your content by restricting pages and posts to specific user roles or login status (whether a user is logged in). If an unauthorized person attempts to view protected content, they can be automatically redirected to authenticate via a SAML Identity Provider (IDP), the WordPress login page, or any custom URL you specify.

<a href="https://plugins.miniorange.com/wordpress-media-restriction?utm_source=readme&utm_medium=addons&utm_campaign=media_restriction" target="_blank">**Media Restriction:**</a> Blocks unauthorized downloads of images, videos, and documents by allowing only SAML SSO–verified users with proper IDP permissions to view or retrieve media files.

<a href="https://plugins.miniorange.com/wordpress-attribute-based-redirection-restriction?utm_source=readme&utm_medium=addons&utm_campaign=redirection_restriction" target="_blank">**Attribute-Based Redirection:**</a> Directs users to specific URLs after Single Sign On based on IDP attributes such as role or department to ensure tailored access paths.

<a href="https://plugins.miniorange.com/guest-user-login?utm_source=readme&utm_medium=addons&utm_campaign=guest_user_login" target="_blank">**Guest User Login (Anonymous Login):**</a> Allows users to log in to the WordPress site without creating a WordPress user account for them.

<a href="https://plugins.miniorange.com/sso-session-management?utm_source=readme&utm_medium=addons&utm_campaign=sso_sessions" target="_blank">**SSO Session Management:**</a> Sets default or role-specific session timeouts for SAML SSO users according to IDP-assigned roles to balance convenience with security.

<a href="https://plugins.miniorange.com/wordpress-sso-login-audit?utm_source=readme&utm_medium=addons&utm_campaign=sso_audit" target="_blank">**SSO Login Audit:**</a> Records all user login and registration activities on your WordPress site. It generates detailed reports that track essential information for each session, including the user, login time, and source IP address. The addon also includes advanced search filters for quickly locating specific events within the audit logs.

<a href="https://plugins.miniorange.com/wordpress-ip-whitelisting?utm_source=readme&utm_medium=addons&utm_campaign=wp_ip_whitelisting" target="_blank">**WordPress IP Whitelisting:**</a> Grants WordPress access to users with specific IPs and allows them to bypass IDP redirection and access restricted content. 

<a href="https://plugins.miniorange.com/wordpress-profile-picture-map?utm_source=readme&utm_medium=addons&utm_campaign=wp_profile_map" target="_blank">**Profile Picture Mapping:**</a> Imports avatar images from the IDP into WordPress profiles for authenticated users to personalize the site experience.

<a href="https://plugins.miniorange.com/wordpress-federation-single-sign-on?utm_source=readme&utm_medium=addons&utm_campaign=federation_sso" target="_blank">**Federation SSO:**</a> Supports logins from multiple federated organizations, such as universities or research consortia, by leveraging standard IDP federation protocols to unify access.

Our plugin also integrates with third-party applications such as <a href="https://plugins.miniorange.com/wordpress-learndash-integrator?utm_source=readme&utm_medium=addons&utm_campaign=learndash" target="_blank">**LearnDash**</a>, <a href="https://plugins.miniorange.com/wordpress-woocommerce-integrator?utm_source=readme&utm_medium=addons&utm_campaign=woocommerce" target="_blank">**WooCommerce**</a>, <a href="https://plugins.miniorange.com/wordpress-buddypress-integrator?utm_source=readme&utm_medium=addons&utm_campaign=buddypress" target="_blank">**BuddyPress**</a>, <a href="https://plugins.miniorange.com/wordpress-memberpress-integrator?utm_source=readme&utm_medium=addons&utm_campaign=memberpress" target="_blank">**MemberPress**</a>, <a href="https://plugins.miniorange.com/paid-membership-pro-integrator?utm_source=readme&utm_medium=addons&utm_campaign=membership_pro" target="_blank">**Paid Memberships Pro**</a>, and <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso-integrations?utm_source=readme&utm_medium=addons&utm_campaign=more" target="_blank">**more**</a>, providing a simple SAML Single Sign On (SSO) experience that lets users access courses, online stores, community forums, membership content, and other protected resources with a single login.

== Top Use Cases of Our WordPress SAML Single Sign On (SSO) Plugin ==

**Education: SSO for Schools, Universities, and Federated Institutions**

Our WordPress SAML SSO plugin helps <a href="https://plugins.miniorange.com/single-sign-on-sso-for-education-and-universities-in-wordpress?utm_source=readme&utm_medium=education_sso&utm_campaign=educational_institutions" target="_blank">**educational institutions**</a> simplify secure access across their WordPress sites. Faculty and staff can log in through Azure AD SSO, while external collaborators or research partners authenticate using WordPress Okta SSO, Shibboleth SSO, G Suite SSO, and other IDPs. This flexibility ensures universities can accommodate multiple identity providers without creating separate WordPress accounts for every user.

Along with multiple IDPs, the plugin also supports academic federations such as InCommon, HAKA, HKAF, etc. These federations connect entire networks of trusted institutions and allow users to authenticate with their home institution credentials, enabling students, faculty, and researchers from partner universities or organizations to access WordPress resources directly.

With our plugin, universities can also manage <a href="https://plugins.miniorange.com/wordpress-multisite-single-sign-on-sso-login?utm_source=readme&utm_medium=multisite_sso&utm_campaign=sso_multisite_networks" target="_blank">**SSO for Multisite Networks**</a> more effectively, making it easy to control access across subsites such as library.uni.edu or research.uni.edu. It further provides **Guest User Login** for temporary access by external collaborators, ensuring consistent and secure entry to academic resources.

**Healthcare: SSO for Hospitals, Clinics, and Medical Portals**

Healthcare organizations require access controls that protect sensitive data while remaining compliant with regulations. Our <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso-for-healthcare-medical-institutes?utm_source=readme&utm_medium=healthcare_sso&utm_campaign=sso_plugin_healthcare" target="_blank">**WordPress SAML SSO plugin for healthcare**</a> allows hospitals, clinics, medical portals, and other Healthcare Providers (HCPs) to authenticate users against their existing IDPs.

The plugin includes advanced features such as **Force Authentication**, which requires users outside the hospital network to authenticate with their IDP to access organizational resources, while allowing on-site users immediate access without re-authentication.

To further protect sensitive data, healthcare administrators can configure **Role‑based Restrictions** that limit access to patient records, laboratory results, research data, administrative content, and other sensitive information. This ensures that only authorized personnel can view or manage sensitive resources while helping institutions stay compliant with HIPAA and other healthcare data protection standards.

**WooCommerce: SSO for B2B, Institutional Buyers, and E-Commerce**

For online stores, the shopping experience depends on security and convenience working together. Our <a href="https://plugins.miniorange.com/wordpress-woocommerce-sso-single-sign-on?utm_source=readme&utm_medium=wp_woocommerce_sso&utm_campaign=saml_sso" target="_blank">**WordPress SAML SSO**</a> plugin integrates WooCommerce with Identity Providers (IDPs) such as Azure AD, Okta, or even other WordPress sites, allowing customers and staff to sign in with the same credentials they already use in their organization.

When deployed with the <a href="https://plugins.miniorange.com/wordpress-woocommerce-integrator?utm_source=readme&utm_medium=wp_woocommerce&utm_campaign=woocommerce_integrator" target="_blank">**WooCommerce Integrator**</a>, SSO becomes part of the checkout process. Customers adding products to their carts are prompted to authenticate, and once logged in, their account details and order information synchronize automatically. 

On the backend, manager and staff roles assigned in the IDP flow directly into WooCommerce, granting specific access to order data, inventory, and dealer portals. With user permissions centralized, businesses avoid duplication errors and maintain consistent security across their e‑commerce operations.

**Multiple Site Businesses: SSO (Single Sign On) in WordPress to WordPress sites**

Many businesses run multiple WordPress sites: a **main site** that stores all user accounts and roles (customers, managers, staff), and **secondary sites** that provide additional services and resources. 

To avoid repeated logins and maintain consistent user management, the secondary sites can act as Service Providers (SPs) using our SAML Single Sign On plugin, while the main site serves as the Identity Provider (IDP) using the <a href="https://wordpress.org/plugins/miniorange-wp-as-saml-idp/?utm_source=readme&utm_medium=saml_idp&utm_campaign=website_user_plugin">**SAML IDP – Login with Website Users plugin**</a>.

When a user tries to access a secondary site, they are redirected to log in on the main site. Upon successful authentication, their credentials, profile details, and roles are passed back to the SP site. This provides seamless access, keeps user data synchronized, and maintains role-based permissions across both sites without manual account duplication.

**Enterprise: SSO with Azure AD (Microsoft Entra ID)**

Our plugin supports both **Single-Tenant** and <a href="https://plugins.miniorange.com/wordpress-azure-office365-integrations?utm_source=readme&utm_medium=azure365_lp&utm_campaign=multi_tenant_azure" target="_blank">**Multi-Tenant Azure AD SSO**</a>, allowing users from different Azure AD (Microsoft Entra ID) tenants, whether they belong to separate organizations, subsidiaries, or business units, to securely log in to WordPress using Azure AD.

To simplify user lifecycle management, the plugin offers full **SCIM Provisioning and Deprovisioning**, automatically creating, updating, or removing WordPress accounts whenever changes are made in Azure AD. This ensures user data and permissions remain consistent and up to date across systems without manual intervention.

For added reliability, the plugin includes **Automatic Certificate Synchronization**, handling certificate rotation in Azure AD SSO behind the scenes. This eliminates downtime and prevents login failures, ensuring users can always access WordPress without disruption.

The plugin also extends beyond authentication by connecting WordPress with core Microsoft applications, including <a href="https://plugins.miniorange.com/microsoft-sharepoint-wordpress-integration?utm_source=readme&utm_medium=wp_sharepoint_lp&utm_campaign=sharepoint" target="_blank">**SharePoint**</a>, <a href="https://plugins.miniorange.com/microsoft-power-bi-embed-for-wordpress?utm_source=readme&utm_medium=wp_powerbi_lp&utm_campaign=powerbi" target="_blank">**Power BI**</a>, <a href="https://plugins.miniorange.com/wordpress-integration-with-dynamics-crm-365-apps?utm_source=readme&utm_medium=wp_dynamic_lp&utm_campaign=dynamic_crm" target="_blank">**Dynamics CRM**</a>, <a href="https://plugins.miniorange.com/wordpress-outlook-calendar-events-integration?utm_source=readme&utm_medium=wp_outlook_lp&utm_campaign=outlook" target="_blank">**Outlook**</a>, and <a href="https://plugins.miniorange.com/wordpress-azure-ad-b2c-office-365-integrations?utm_source=readme&utm_medium=azure_b2c_lp&utm_campaign=more" target="_blank">**more**</a>, making it easy to embed files, display dashboards, and synchronize data within WordPress.


== Feedback and Support ==
We’re committed to ensuring you have a smooth experience with our **WordPress SAML Single Sign On (SSO) plugin**. If you have any questions, need customizations, or would like to request additional features, feel free to contact us at <a href=”mailto:samlsupport@xecurify.com” target=”_blank”>samlsupport@xecurify.com</a>.

== Installation ==

= From your WordPress dashboard =
1. Visit `Plugins > Add New`.
2. Search for `SAML SP Single Sign On`. Find and Install `SAML SP Single Sign On – SSO login`.
3. Activate the plugin from your Plugins page.

= From WordPress.org =
1. Download SAML SP Single Sign On – SSO login plugin.
2. Unzip and upload the `miniorange-saml-20-single-sign-on` directory to your `/wp-content/plugins/` directory.
3. Activate miniOrange SSO using SAML 2.0 from your Plugins page.


== Frequently Asked Questions ==

= How to configure WordPress SSO? =
* Download and install <a href=”https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/” target=”_blank”>WordPress SAML 2.0 SSO plugin</a>.
* Add your WordPress site metadata details from the WordPress SAML Single Sign On plugin, into your Identity Provider (IDP), and generate the IDP metadata.
* Upload the IDP metadata file/URL in the WP SSO Plugin on your WordPress site for a successful WordPress SSO connection.

= I am not able to configure the Identity Provider with the provided settings =
Please email us at <a href="mailto:samlsupport@xecurify.com">samlsupport@xecurify.com</a> or <a href="https://miniorange.com/contact" >Contact us</a>. You can also submit your app request from plugin's configuration page.

= My SAML Identity Provider is not listed in the plugin or guides. How can I configure the plugin with my SAML IDP? =
The WordPress SAML Single Sign On plugin can be configured with any SAML compliant Identity Provider simply by exchanging the SAML metadata between the plugin and your SAML IDP.
If you need any help in configuring the plugin, please email us at <a href="mailto:samlsupport@xecurify.com">samlsupport@xecurify.com</a>.

= Can the plugin be configured to support multiple Identity Providers? =
You can configure multiple SAML Identity Providers like Azure AD, Azure B2C, Okta, ADFS, Keycloak, Ping, etc in the plugin and provide different Single Sign On SSO login flow to the users.

= Is the plugin compatible with hosting providers like WP Engine, Pantheon, WordPress VIP, etc? =
The Enterprise and All-Inclusive plans of our WordPress Single Sign On SSO SAML plugin are best suitable for multiple environments in a hosting provider.

= Is it possible to redirect users to a particular URL after login or logout =
With our WordPress Single Sign On SSO plugin, you can set Relay State URL's to redirect users after login as well as after logout.

= I need integration with different third party plugins like Learndash, BuddyPress, WooCommerce, Memberpress, etc installed on my WordPress site =
We already provide support for most of the third party plugins. Please email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="https://miniorange.com/contact">Contact us</a>
and we will assist you with the integration.

= For any query/problem/request =
Visit Help & FAQ section in the plugin OR email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="https://miniorange.com/contact">Contact us</a>. You can also submit your query from plugin's configuration page.

== Screenshots ==
1. Connect your WordPress site with any SAML-compliant Identity Provider.
2. Configure your WordPress as SAML Service Provider.
3. Gather Metadata for your SAML Identity Provider.
4. Configure Attribute/Role Mapping for Users in WordPress.
5. Add a widget to enable SAML Single Sign On.
6. Plugin-tour which guides you through the entire plugin setup.
7. Addons that extend plugin functionality.


== Changelog ==

= 5.4.0 =
* Improvement: Minor UI Improvements

= 5.3.9 =
* Improvement: Compatibility with WordPress 6.9
* Fix: Handled warnings in case of Invalid SAML Response
* Improvement: Usability Fixes

= 5.3.8 =
* Fix: Fixed console warnings due to notice.

= 5.3.7 =
* Improvement: Usability Improvements

= 5.3.6 =
* Improvement: Minor UI Improvements

= 5.3.5 =
* Fix: Fixed the documentation links that are not accessible

= 5.3.4 =
* Feature: Added SSO Links with redirect option to use on your pages.
* Improvement: Renamed Service Provider Setup tab to IDP Configuration.
* Improvement: Updated Support form for call requests and improved overall UI.

= 5.3.3 =
* Improvement: Handling SAML Destination with null safety and sanitization

= 5.3.2 =
* Fix: Added check for handling invalid SAML Response XML and Empty DOMDocument

= 5.3.1 =
* Improvement: Added exception details in function comments to address PHPCSFix issues
* Fix: Updated htaccess rules to restrict direct URL access to SAML debug logs

= 5.3.0 =
* Updated the pot files for German and Japanese Languages

= 5.2.9 =
* Minor fixes

= 5.2.8 =
* Compatibility with WordPress 6.8
* Added the pot files for German and Japanese Languages

= 5.2.7 =
* Added compatibility with PHP 8.4
* Updated the Test Configuration window and included FAQs to help troubleshoot errors
* Usability Fixes
* Removed POT files

= 5.2.6 =
* Removed Unused Code

= 5.2.5 =
* Improved Exception Handling

= 5.2.4 =
* Fixed console warnings when the notice gets dismissed

= 5.2.3 =
* Security fixes
* UI Improvements

= 5.2.2 =
* Compatibility fixes for PHP 5.6
* Improvements to the Test Configuration Window

= 5.2.1 =
* Compatibility with WordPress 6.7
* Usability Improvement

= 5.2.0 =
* Added the pot files for French, Spanish, German and Japanese Languages
* UI Improvements

= 5.1.9 =
* Improvements to the SSO button on the Wordpress login page
* UI Improvements

= 5.1.8 =
* Handled Fatal Errors when PHP extensions (CURL, DOM, OPENSSL) are disabled
* Clarified error codes on the Test Configuration tab for easier troubleshooting
* Fixed console warnings during registration and login in the Account Setup Tab
* UI Improvements

= 5.1.7 =
* Compatibility with WordPress 6.6
* Added translation support
* Added additional checks around the wp-config.php access flow
* UI improvements

= 5.1.6 =
* Fix for wp-config.php file read flow

= 5.1.5 =
* Added PHPCS Fixes
* Fix for the warning while editing the Theme
* Performance Fixes

= 5.1.4 =
* Compatibility Fixes with WordPress 6.5

= 5.1.3 =
* Updating pricing links for WordPress SSO Plugin

= 5.1.2 = 
* Added free trial for SAML SSO

= 5.1.1 =
* Updates in SAML SSO Plans UI

= 5.1.0 =
* SSO button Fix on update

For older changelog entries, please see the [additional changelog.txt file](https://plugins.svn.wordpress.org/miniorange-saml-20-single-sign-on/trunk/changelog.txt) provided with the plugin.

== Upgrade Notice ==

= 5.4.0 =
* Improvement: Minor UI Improvements

= 5.3.9 =
* Improvement: Compatibility with WordPress 6.9
* Fix: Handled warnings in case of Invalid SAML Response
* Improvement: Usability Fixes

= 5.3.8 =
* Fix: Fixed console warnings due to notice.

= 5.3.7 =
* Improvement: Usability Improvements

= 5.3.6 =
* Improvement: Minor UI Improvements

= 5.3.5 =
* Fix: Fixed the documentation links that are not accessible

= 5.3.4 =
* Feature: Added SSO Links with redirect option to use on your pages.
* Improvement: Renamed Service Provider Setup tab to IDP Configuration.
* Improvement: Updated Support form for call requests and improved overall UI.

= 5.3.3 =
* Improvement: Handling SAML Destination with null safety and sanitization

= 5.3.2 =
* Fix: Added check for handling invalid SAML Response XML and Empty DOMDocument

= 5.3.1 =
* Improvement: Added exception details in function comments to address PHPCSFix issues
* Fix: Updated htaccess rules to restrict direct URL access to SAML debug logs

= 5.3.0 =
* Updated the pot files for German and Japanese Languages

= 5.2.9 =
* Minor fixes

= 5.2.8 =
* Compatibility with WordPress 6.8
* Added the pot files for German and Japanese Languages

= 5.2.7 =
* Added compatibility with PHP 8.4
* Updated the Test Configuration window and included FAQs to help troubleshoot errors
* Usability Fixes
* Removed POT files

= 5.2.6 =
* Removed Unused Code

= 5.2.5 =
* Improved Exception Handling

= 5.2.4 =
* Fixed console warnings when the notice gets dismissed

= 5.2.3 =
* Security fixes
* UI Improvements

= 5.2.2 =
* Compatibility fixes for PHP 5.6
* Improvements to the Test Configuration Window

= 5.2.1 =
* Compatibility with WordPress 6.7
* Usability Improvement

= 5.2.0 =
* Added the pot files for French, Spanish, German and Japanese Languages
* UI Improvements

= 5.1.9 =
* Improvements to the SSO button on the Wordpress login page
* UI Improvements

= 5.1.8 =
* Handled Fatal Errors when PHP extensions (CURL, DOM, OPENSSL) are disabled
* Clarified error codes on the Test Configuration tab for easier troubleshooting
* Fixed console warnings during registration and login in the Account Setup Tab
* UI Improvements

= 5.1.7 =
* Compatibility with WordPress 6.6
* Added translation support
* Added additional checks around the wp-config.php access flow
* UI improvements

= 5.1.6 =
* Fix for wp-config.php file read flow

= 5.1.5 =
* Added PHPCS Fixes
* Fix for the warning while editing the Theme
* Performance Fixes

= 5.1.4 =
* Compatibility Fixes with WordPress 6.5

= 5.1.3 =
* Updating pricing links for WordPress SSO Plugin

= 5.1.2 = 
* Added free trial for SAML SSO

= 5.1.1 =
* Updates in SAML SSO Plans UI

= 5.1.0 =
* SSO button Fix on update

= 5.0.9 =
* Fix for iconv() warning in linux environment
* Fix for upgrade to premium versions
* Minor UI improvements

= 5.0.8 =
* WP 6.4 Compatibility
* Compatibility fix with Themify Plugin
* UI fixes

= 5.0.7 =
* WP 6.3 Compatibility
* Added proper error message when wp-config.php is not writable for enabling debug logs
* Fix for warning in the list of IDP logos 

= 5.0.6 =
* Fix for NetIQ SAML IDP Logo
* Fix for x509 certificate in SAML SSO Configurations

= 5.0.5 =
* Vulnerability fix for Broken Access Control in SSO Settings

= 5.0.4 =
* Added additional exception handling checks to enhance the validation of SAML Response
* Added Steps to download the paid plugin
* Minor Bug Fixes

= 5.0.3 =
* Added new IDPs like Siteminder, VMWare, OpenAthens
* Minor Bug Fixes

= 5.0.2 =
* Added new IDPs like Sharepoint, Dynamic CRM, LastPass, Drupal

= 5.0.1 =
* Compatibility with WordPress 6.2
* Added iconv encoding issue flow 
* Fixed plugin update using FTP replace
* Fixed SSO widget title issue
* Fixed plugin deactivation issue
* Fixes in debug log functionality

= 5.0.0 =
* Added PHPCS fixes

= 4.9.32 =
* Security fix for Open Redirect Vulnerability

= 4.9.31 =
* Fixes in logger functionality

= 4.9.30 =
* Added an option to disable assertion validity
* Added custom Bootstrap CSS and JS
* Updated images to webp format
* Added Azure AD Integrations
* Cross browser UI fixes

= 4.9.29 =
* Compatibility with WordPress 6.1
* Fixes for PHP 8.1

= 4.9.28 =
* Fixed console warning

= 4.9.27 =
* Plugin delete fix

= 4.9.26 =
* Modified code flow for form save
* Made Utilities class static
* Improvements in logger flow

= 4.9.25 =
* Updated intel-tel library
* Updated modenizr, Font Awesome, Time Picker libraries
* Improved design of success and error messages
* Added support for dynamic folder name for plugin

= 4.9.24 =
* Updated Bootstrap version
* Sanitization fixes for global variables

= 4.9.23 =
* Removed role mapping for existing users

= 4.9.22 =
* Fixed a bug with post login redirection
* Fixed RelayState URL

= 4.9.21 =
* Sanitization and Escaping fixes
* Role Mapping fix

= 4.9.20 =
* Introduced Error Codes
* Removed some obsolete functions

= 4.9.19 =
* Fixed UI compatibility with all themes

= 4.9.18 =
* Minor UI fixes

= 4.9.17 =
* Fixed Login button positioning

= 4.9.16 =
* Revamped plugin's UI
* NameID Format fix for ADFS

= 4.9.15 =
* Compatibility with WordPress 5.9
* Added Support for NameID Policy in SAML Request

= 4.9.14 =
* Removed end of year sale
* Readme updates

= 4.9.13 =
* License Banner fixes

= 4.9.12 =
* Added discounted pricing for WordPress SSO plans

= 4.9.11 =
* Updated licensing plans for SAML SSO
* Fixed bugs for Debug Framework
* Other UI fixes

= 4.9.10 =
* Fixed an issue with broken plugin links

= 4.9.09 = 
* Added Debug Logs Framework
* Added new IDP's support for SSO
* WordPress 5.8 Compatibility

= 4.9.08 =
* Demo request improvements

= 4.9.07 =
* Licensing Update for WordPress SSO plans

= 4.9.06 =
* UI improvements and fixes
* Readme changes

= 4.9.05 =
* UI changes and fixes
* WordPress 5.7 Compatibility

= 4.9.04 =
* Licensing Update for WordPress SSO plans

= 4.9.03 =
* Added video plugin guides for WordPress SSO

= 4.9.02 =
* Welcome page fixes

= 4.9.01 =
* Added support of Localization
* WordPress 5.6 Loop back issue fix
* PHP 8 Compatibility
* Fixed SAML Login URL query parameters bug
* Removed end of year sale

= 4.9.00 =
* Rolled out end of year sale

= 4.8.99 =
* Added new Add-on description

= 4.8.98 =
* SP Metadata Update

= 4.8.97 =
* Call setup fixes
* Added contact phone number

= 4.8.96 =
* Added new IDP guides: Azure B2C and Gluu server
* Updated XMLSecLibs

= 4.8.95 =
* Added Setup call feature

= 4.8.94 =
* Revamped add-ons tab

= 4.8.93 =
* Updated description for add-ons

= 4.8.92 =
* Security patches

= 4.8.91 =
* Added a new licensing plan

= 4.8.90 =
* Plugin tour fixes

= 4.8.89 =
* Adding more guides in SAML plugin

= 4.8.88 =
* Bug fixes

= 4.8.87 =
* Bug fixes in SAML SSO widget
* Compatibility with WordPress 5.4

= 4.8.86 =
* Compatibility fixes with PHP5

= 4.8.85 =
* Visual Tour fixes
* Fixed Telephone number input

= 4.8.84 =
* Security patches

= 4.8.83 =
* Nomenclature changes
* Compatibility with PHP 7.4

= 4.8.82 =
* Added new SAML-compliant IdP guides
* Bug fixes

= 4.8.81 =
* Updated SAML-compliant IdP guides

= 4.8.80 =
* Bug fixes

= 4.8.79 =
* Added Plugin-wide tour

= 4.8.78 =
* Request a demo feature.

= 4.8.77 =
* Bug Fixes

= 4.8.76 =
* Security Patches

= 4.8.75 =
* Visual-tour fixes

= 4.8.74 =
* Feedback form bug fix

= 4.8.73 =
* Security patches.

= 4.8.72 =
* Security patch.

= 4.8.71 =
* Security fixes.

= 4.8.70 =
* Bug fixes
* Option to send plugin configuration with request

= 4.8.69 =
* Tested upto WordPress 5.1.0
* Replaced CURL calls with HTTP API calls.

= 4.8.68 =
* Tested upto WordPress 5.0.2.
* Updated to Latest XMLSeclibs library.
* Compatibility with PHP 7.3.

= 4.8.67 =
* Description changes.

= 4.8.66 =
* Tested upto WordPress 5.0.0.
* Added option to disable character encoding.

= 4.8.65 =
* Bug Fixes

= 4.8.64 =
* Compatibility with PHP version 5.3+ upto latest version of PHP
* Activation Issue Fixes

= 4.8.63 =
* Code enhancements.

= 4.8.62 =
* Fixed issues on SAML SP SSO plugin activation.

= 4.8.61 =
* Bug fixes.

= 4.8.60 =
* Updated to latest XMLSeclibs SAML library (version 3.0.1).
* Added the visual tour to get familiar with plugin features and support.
* Revamped the plugin UI.
* Added the Add-On and their description.
* Export plugin configurations.
* IdP guides.

= 4.8.52 =
* Tested upto WordPress 4.9.8

= 4.8.51 =
* Added support for guest login
* Added IDP guide links

= 4.8.50 =
* Added feedback form.

= 4.8.44 =
* Tested upto WordPress 4.9.6

= 4.8.43 =
* Compatibility issue with PHP 7.2(Removed deprecated asserts )

= 4.8.42 =
* Input validation fixes.

= 4.8.41 =
* Support for PHP version 5.3 and above.

= 4.8.40 =
* Added feature for Exporting plugin configuration.
* Added View SAML Request and Response

= 4.8.35 =
* Fixed the Entity ID/Issuer issues for AzureAD Idp.

= 4.8.34 =
* Introducing miniOrange on-premise IDP

= 4.8.33 =
* Compatibilty with WordPress 4.9

= 4.8.32 =
* Introducing Standard version of SAML Plugin for small sized customers.
* Fixed Registration issue.

= 4.8.31 =
* Introducing Standard version of SAML Plugin for small sized customers.Check Licensing Plans for more details.

= 4.8.30 =
* Fix the CSS and JS inclusion only in the plugin pages, removed it from frontend and backend of wordpress.

= 4.8.28 =
* Bug fix for PHP 5.4.x version.

= 4.8.27 =
* Support for Multiple Certificate via Metadata

= 4.8.26 =
* SAML Configuration by Uploading metadata.
* Descriptive Error Messages.
* Use miniorange as IdP feature.
* More verbose instructions.
* Compatibility with WordPress 4.8

= 4.8.25 =
Updating Licensing Plans

= 4.8.24 =
Updating Plugin Title

= 3.8.14 =
Pattern change on OTP Verification page

= 3.8.12 =
Major security fixes. It is recommended to update to this version.

= 3.8.7 =
Fixes for WordPress 4.5

= 3.8.6 =
Added features: Support for WordPress Multi-site (Network setup), support for Multiple IDPs and some fixes for WordPress 4.5

= 3.8.4 =
Introducing Free Trial for the premium version.

= 3.8.2 =
Security fix for preventing non-admin users from changing the settings.

= 3.8 =
Security fix for IDPs that signs only Assertion and not the complete SAML Response XML.

= 3.7 =
Support for Integrated Windows Authentication – contact <a href="mailto:info@xecurify.com">info@xecurify.com</a> if interested

= 3.5 =
Decrypt assertion bug fix

= 3.4 =
Added some requested features and some bug fixes.

= 3.0 =
Major Update. We have taken ut-most care to make sure that your existing login flow doesn't break. If you have issues after this update then please contact us. We will get back to you very soon.

= 2.1 =
Removed unwanted JS files.

= 2.0 =
Added new feature like role mapping and auto redirect user to your IdP.

= 1.7 =
Resolved UI issues for some users

= 1.6 =
Added help and troubleshooting guide.

= 1.5 =
Added error messaging.

= 1.4 =
Added fixes.

= 1.3 =
Added validations and fixes.
UI Improvements.

= 1.2 =
Some UI improvements.

= 1.1 =
Added Attribute mapping / Role mapping and test application.

= 1.0 =
I will update this plugin when ever it is required.