by Pantheon
4.4 (7 reviews)
WP SAML Auth
SAML authentication for WordPress.
Compatible with WP 6.9
v2.3.0
Current Version v2.3.0
Updated 1 week ago
Last Update on 08 Jan, 2026
Synced 6 hours ago
Last Synced on
Rank
#2,668
+1 this week
Active Installs
7K+
—
No change
KW Avg Position
3
—
No change
Downloads
191.1K
+19 today
Support Resolved
50%
—
No change
Rating
88%
Review 4.4 out of 5
4.4
(7 reviews)
Next Milestone 8K
7K+
8K+
23
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 106 more installs to reach 8K+
Rank Changes
Current
#2,668
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.4
7 reviews
Overall
88%
5
6
(86%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
1
(14%)
Tracked Keywords
Showing 1 of 1| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| SAML | 3 | — | Tag | 7 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Support Threads Overview
Resolved
Unresolved
2
Total Threads
1
Resolved
1
Unresolved
50%
Resolution Rate
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.3.0
- Last Updated
- Jan 08, 2026
- Requires WP
- 6.4+
- Tested Up To
- 6.9
- PHP Version
- 7.4 or higher
- Author
- Pantheon
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.4
- Reviews
- 7
- Support Threads
- 2
- Resolved
- 50%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,736
Master Addons For Elementor – White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
Anti-Malware Security and Brute-Force Firewall
100K+ installs
#295
WPS Limit Login
100K+ installs
#309
reCaptcha by BestWebSoft
100K+ installs
#316
Frequently Asked Questions
Common questions about WP SAML Auth
If you'd like to make sure the user's display name, first name, and last name are updated in WordPress when they log back in, you can use the following code snippet: /** * Update user attributes after a user has logged in via SAML. */ add_action( 'wp_saml_auth_existing_user_authenticated', function( $existing_user, $attributes ) { $user_args = array( 'ID' => $existing_user->ID, ); foreach ( array( 'display_name', 'first_name', 'last_name' ) as $type ) { $attribute = \WP_SAML_Auth::get_option( "{$type}_attribute" ); $user_args[ $type ] = ! empty( $attributes[ $attribute ][0] ) ? $attributes[ $attribute ][0] : ''; } wp_update_user( $user_args ); }, 10, 2 ); The wp_saml_auth_existing_user_authenticated action fires after the user has successfully authenticated with the SAML IdP. The code snippet then uses a pattern similar to WP SAML Auth to fetch display name, first name, and last name from the SAML response. Lastly, the code snippet updates the existing WordPress user object.
Because SimpleSAMLphp uses PHP sessions to manage user authentication, it will work unreliably or not at all on a server configuration with multiple web nodes. This is because PHP's default session handler uses the filesystem, and each web node has a different filesystem. Fortunately, there's a way around this. First, install and activate the WP Native PHP Sessions plugin, which registers a database-based PHP session handler for WordPress to use. Next, modify SimpleSAMLphp's www/_include.php file to require wp-load.php. If you installed SimpleSAMLphp within the wp-saml-auth directory, you'd edit wp-saml-auth/simplesamlphp/www/_include.php to include: <?php require_once dirname( dirname( dirname( dirname( dirname( dirname( __FILE__ ) ) ) ) ) ) . '/wp-load.php'; Note: the declaration does need to be at the top of _include.php, to ensure WordPress (and thus the session handling) is loaded before SimpleSAMLphp. There is no third step. Because SimpleSAMLphp loads WordPress, which has WP Native PHP Sessions active, SimpleSAMLphp and WP SAML Auth will be able to communicate to one another on a multi web node environment.
Please report security bugs found in the source code of the WP SAML Auth plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
If you're using the SimpleSAMLphp connection type: * Critical Security Requirement: Version 2.0.0 or later is required to fix CVE-2023-26881 (XML signature validation bypass vulnerability). * Recommended Security Requirement: Version 2.3.7 or later is recommended for additional security fixes. * Authentication will be blocked for versions below 2.0.0 when "Enforce Security Requirements" is enabled. * It's always recommended to use the latest stable version of SimpleSAMLphp for security and compatibility.