=== SAML Single Sign On – SAML SSO Login ===
Contributors: miniOrange
Donate link: http://miniorange.com
Tags: SAML,WordPress SSO, login, Azure AD, Single sign on
Requires at least: 3.7
Tested up to: 5.8
Requires PHP: 5.4
Stable tag: 4.9.08
License: MIT/Expat
License URI: https://docs.miniorange.com/mit-license

WordPress Single Sign On SSO login with Azure, Azure B2C, Okta, ADFS, Keycloak, Ping, Onelogin, Gsuite, Shibboleth & many SAML IdPs [24/7 SUPPORT]

== Description ==

WordPress Single Sign On SSO with our SAML Single Sign On – SSO Login plugin allows SSO with Azure AD, Azure AD B2C, Keycloak, ADFS, Okta, Shibboleth, Salesforce, GSuite / Google Apps, Office 365, SimpleSAMLphp, OpenAM, Centrify, Ping, RSA, IBM, Oracle, OneLogin, Bitium, WSO2, NetIQ, ClassLink and all SAML 2.0 capable Identity Providers into your WordPress site.

You can checkout the following video to configure the plugin with your Identity Provider:

[youtube https://youtu.be/gilfhNFYsgc]

SAML SP Single Sign On (SSO) provides SAML authentication for WordPress allowing your users to login to the WP site.

= List of Supported IdPs =
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-ad" target="_blank">**Azure AD**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-b2c" target="_blank">**Azure AD B2C**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-jboss-keycloak" target="_blank">**Keycloak**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-adfs" target="_blank">**ADFS**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-okta" target="_blank">**Okta**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-salesforce" target="_blank">**Salesforce**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-ad" target="_blank">**Office 365**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-shibboleth3" target="_blank">**Shibboleth**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-google-apps" target="_blank">**GSuite / Google Apps**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-miniorange" target="_blank">**miniOrange**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-onelogin" target="_blank">**OneLogin**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-centrify" target="_blank">**Centrify**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-gluu-server" target="_blank">**Gluu Server**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-simplesaml" target="_blank">**SimpleSAMLphp**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-openam" target="_blank">**OpenAM**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-pingone" target="_blank">**Ping Identity / PingOne**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-pingfederate" target="_blank">**Ping Federate / Ping Identity**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-rsa-secureid" target="_blank">**RSA**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-custom-idp" target="_blank">**IBM**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-oracle-enterprise-manager" target="_blank">**Oracle**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-bitium" target="_blank">**Bitium**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-wso2" target="_blank">**WSO2**</a> (supports SAML SSO for WordPress login)
*	<a href="https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-custom-idp" target="_blank">**NetIQ**</a> (supports SAML SSO for WordPress login)
and practically any SAML compliant Identity Provider.

= WordPress Single Sign On (SSO) =

WordPress Single Sign-On (SSO) is an authentication process in which a user can login to multiple applications and/or websites by using only a single set of login credentials (such as username and password). This prevents the need for the user to login separately into the different applications. WordPress Single Sign-On addresses the challenge of maintaining the credentials for each application separately, streamlining the process of signing-on without need to re-enter the password.

WordPress Single Sign On allows your users to login to your WordPress site by authenticating with their IDP. If your users first login to some other application connected to your IDP, they can seamlessly login to WordPress without being prompted for login again.

This SAML WordPress Single Sign On SSO solution provides SAML SSO capability to your WordPress site, converting it to a SAML compliant Service Provider which can be configured with any SAML compliant Identity Provider, allowing your users to login to your WP site.

WordPress Single Sign on also allows you to manage login and achieve Single Sign On on your WordPress membership site using Azure AD, Azure B2C, ADFS, Keycloak, GSuite / Google Apps, Okta, Salesforce, Office 365, Shibboleth, or any SAML compliant Identity Provider so that you can allow your users to login to WordPress as a member via using their IDP credentials.

miniOrange WordPress Single Sign on(SAML SSO) Plugin acts as a SAML 2.0 Service Provider which can be configured to establish the trust between the plugin and a SAML 2.0 capable Identity Providers to securely authenticate the user to the Wordpress site. This allows your users to securely login to the WP site.
WordPress Multi-Site Environment and ability to configure Multiple SAML IDPs against wordpress as SAML service provider is also supported in premium SAML SP Single Sign On plugin.

WordPress SAML Single Sign On supports all kinds of SSO use cases such as Azure login into WordPress, Azure AD login into WordPress, Azure AD SSO(Azure AD Single Sign-On), Login with Azure AD, Login using Azure AD, Login with Office 365, Office 365 login, Office 365 Single Sign On, Login using Office 365, ADFS login into WordPress, Login with ADFS, Okta login, OneLogin SSO, Salesforce login, Login using Salesforce, Google Apps login, Google Apps Single Sign On, Login with Google Apps, Login using Google Apps, Login using Gsuite, Gsuite login into WordPress, Keycloak login, Keycloak SSO, Auth0 login, Shibboleth login, Login with Shibboleth, Login using Shibboleth, Login with Ping, PingFederate login, Ping Federate SSO, ClassLink SSO etc. allowing your users to securely login to the WordPress site. 

WordPress SAML Single Sign On provides Anonymous Login(Guest User Login) for your WordPress site so that your users can login to the WordPress site using the IdP credentials without creating the users in the site. 

= WORDPRESS SINGLE SIGN-ON (SSO) USE-CASES: =

**Azure SSO**
The WordPress SAML Single Sign On plugin supports Azure SSO use cases such as AzureAD SSO(Azure AD Single Sign-On), Azure B2C SSO, Azure login into WordPress, Login with Azure AD, Login using Azure AD, Office 365 SSO(Office 365 Single Sign On), Login with Office 365, Login using Office 365, Office 365 Login, PowerBI SSO,etc.
You can also enable SSO with multiple Azure tenants using our Azure multi-tenant add-on (Available with the All-Inclusive license of WordPress Single Sign On (SAML SSO) plugin). Using this you can allow users in multiple Azure tenant or Office 365 tenant to login to your WordPress site. 

Azure AD Login / Azure AD SSO(Azure AD Single Sign-On) / Azure login allows your users to authenticate with their Azure Active Directory credentials on the Microsoft login page in order to log into the WordPress site.
We provide deep integration between WordPress Single Sign On and Azure AD Login in which you can also map the users' information such as givenname, surname, email, groups, etc from your Azure AD to the WordPress site. This allows your users to securely achieve Login with Azure AD / Login using Azure AD / Azure AD SSO / Azure login / for you WordPress site.  
This also allows your Office 365 users to achieve WordPress Single Sign On(Login with office 365 credentials / Office 365 Login / Login using Office 365) by authenticating via their Office 365 credentials. Our plugin allows you to map user information from Office 365 to your WordPress site in order to seamlessly achieve Office 365 Login / login with office 365 credentials / Office 365 SSO / Login using Office 365.

The WordPress SAML Single Sign On plugin allows your users present in any of the Azure AD tenant to login to the WordPress site. Multi-tenancy for Azure AD can be seamlessly achieved using our Azure AD multi-tenant SSO add-on. This allows SSO with multiple Azure AD tenants in your WordPress site.

**Google Apps SSO**
The WordPress SAML Single Sign On SSO plugin supports SSO with GSuite / Google Apps(Google Apps Login / Login using Gsuite / Login with Google Apps / Login using Google Apps / Gsuite login), allowing the users in your organization to login to your WordPress site using their organization Google Apps credentials.
You can use the WordPress Single Sign On plugin to map the user information such as first name, last name, employee details, etc from Google Apps to your WordPress site in order to achieve Google Apps Login / SSO with GSuite / Login using Gsuite / Login with Google Apps / Login using Google Apps / Gsuite login into WordPress.
We also support WordPress Single Sign On with multiple Google Apps organization on the same site using our All-Inclusive plan.
We provide seamless integration between WordPress Single Sign On and Google Apps Login(Login with Google Apps) in which you can provide Role controls to your users based on Google Groups or Organizational Unit membership.
This allows your users to seamlessly achieve Google Apps Login / Login with Google Apps / Login using Google Apps(Google Apps Single Sign On) for your WordPress site.
WordPress SAML Single Sign On SSO is a leading enterprise grade plugin trusted by thousands of organizations from schools to large public companies, for enabling SSO with GSuite / Google Apps(Google Apps Login / Login using Gsuite / Login with Google Apps / Login using Google Apps / Gsuite login).
Our plugin enables displaying user's Google Profile photo in place of their avatars through out the site(available with Custom integration) in addition to Google Apps Login / SSO with GSuite / Login using Gsuite / Login with Google Apps / Login using Google Apps / Gsuite login.

**Federation SSO**
The WordPress SAML Single Sign On plugin is compatible with Federation use cases allowing your students or staffs to login the WordPress site using their university credentials that is affiliated with any federation such as InCommon, HAKA, HKAF, etc.
To enable Federation SSO, you will need to get the Federation SSO add-on.

**Salesforce Community SSO**
The WordPress SAML Single Sign On plugin allows your Salesforce community users to login to the WordPress site by authenticating with their Salesforce credentials(Login using Salesforce / Salesforce Login).
You can also enable SSO with multiple Salesforce communities using our Salesforce Community add-on.
Our WordPress Single Sign-On(SAML SSO) plugin supports all the Salesforce SSO use cases such as Salesforce Login, Salesforce Single Sign-On, Salesforce Community SSO, Salesforce Login(Single Sign-On) into WordPress, Login using Salesforce, Login with Salesforce.
This allows you to seamlessly achieve Login using Salesforce, Salesforce Login, Salesforce Community SSO, Login with Salesforce, Salesforce Single Sign-On for your WordPress site.

**Keycloak SSO**
The WordPress SAML Single Sign On SSO plugin supports SSO with Keycloak / Login using Keycloak / Login with Keycloak / Keycloak Login / Keycloak Single Sign-On which enables the users to login to your WordPress site using their Keycloak server credentials(Keycloak SSO). You can assign different WordPress roles to users based on their Keycloak groups / Keycloak capabilities. In addition to WordPress Keycloak SSO, we also provide several custom API integration with Keycloak allowing you to sync the users between WordPress and Keycloak. 
Please contact us at <a href="mailto:samlsupport@xecurify.com">samlsupport@xecurify.com</a> to know more about this.

**Ping Federate SSO** 
We provide seamless integraton with Ping Federate which allows SSO into your WordPress site with Ping Federate, Ping Federate login, Login with Ping Federate, Login using Ping Federate, Ping Federate SSO (Single Sign-On).
We also support User provisioning which allows you to sync user's creation, updation and deletion from Ping to your WordPress site.
To enable SCIM User Provisioning with Ping, you will need to get our SCIM user provisioning add-on.

Our WordPress SAML Single Sign On plugin also provides SSO support for schools and universities use-cases like ClassLink SSO or Login using ClassLink into your WordPress site.

The WordPress SAML Single Sign On SSO plugin is equipped with an ever-increasing list of very detailed SAML SSO guides which can be used to configure the plugin with SAML compliant Identity Providers such as Azure AD, Keycloak, ADFS, Okta, Shibboleth, Salesforce, GSuite / Google Apps, Office 365, SimpleSAMLphp, OpenAM, Centrify, Ping, Oracle, OneLogin, and many more SAML Identity Providers, allowing your users to securely login to the WP site. WordPress Single Sign On SSO plugin is trusted by thousands of Enterprise Customers across the World to seamlessly achieve WordPress SSO with any SAML compliant Identity Provider.

WordPress Single Sign On SSO plugin provides an Easy migration feature in the Enterprise and All-Inclusive plan suited to hosting providers like WP Engine, Pantheon, etc. This allows you to configure the plugin for your production and pre-production environments at once and easily switch between your environments without overwriting the configurations.

WordPress Single Sign On SSO plugin provides a support for plugin configuration using WP-CLI Commands. This ensures you can seamlessly achieve WordPress Single Sign On using any SAML compliant Identity Provider.

If you require any Single Sign On (SSO) application or need any help with installing this plugin, please feel free to email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="http://miniorange.com/contact">Contact us</a>.

The plugin is compatible with all kinds of enterprise WordPress SAML Single Sign On SSO use cases where the users existing in Azure AD, Azure AD B2C, ADFS, Keycloak, GSuite / Google Apps, Okta, Salesforce, Office 365, Shibboleth, or any SAML compliant Identity Provider can securely login to the WordPress site by authenticating via the IDP that is configured in the plugin.

That means the WordPress Single Sign On can be used to achieve Azure login into WordPress, Azure AD login, Azure AD SSO(Azure AD Single Sign-On), Login with Azure AD, Login using Azure AD, Office 365 login, Office 365 Single Sign On, Login using Office 365, Login with Office 365, ADFS login, Login with ADFS, Okta login, OneLogin SSO, Salesforce login, Login using Salesforce, Google Apps login, Google Apps Single Sign On, Login with Google Apps, Login using Google Apps, Login using Gsuite, Gsuite login into WordPress, Keycloak login, Keycloak SSO, Auth0 login, Shibboleth login, Login with Shibboleth, Login using Shibboleth, Login with Ping, PingFederate login, Ping Federate SSO, ClassLink SSO etc. on your WP site using SAML SSO.

The plugin can also support WordPress Single Sign On with any Identity Provider including OAuth, OpenID Connect, Active Directory, database using miniOrange IDP allowing your users to login to the WP site via authenticating with their user store.

= Free Version Features =
*   WordPress SAML Single Sign On supports SSO with any 3rd party SAML supported Identity Providers like ADFS, Azure AD, Azure AD B2C, Keycloak, Okta, Salesforce, GSuite / Google Apps, O365, Shibboleth, SimpleSAMLphp, OpenAM, Centrify, Ping, RSA, IBM, Oracle, OneLogin, Bitium, WSO2, NetIQ, ClassLink etc.
*   **Auto Create Users** - Users will be auto-created in WordPress after SAML SSO using our WordPress Single Sign On(SAML SSO) plugin.
*   **Login Widgets** - Use SAML Login Widgets to easily integrate the SAML SSO link with your Wordpress site.
*   **Attribute Mapping** - The NameID value sent by your SAML compliant Identity Provider will be mapped to the Username and Email of your WordPress users.
*   **Role Mapping** - Select default role to assign to SAML SSO users on auto registration during WordPress Single Sign On.

= Standard Version Features =
*   **Unlimited Authentications** - Unlimited authentication with your SAML 2.0 compliant Identity Providers like ADFS, Azure AD, Azure B2C, Keycloak, Okta, Salesforce, GSuite / Google Apps, O365, Shibboleth, SimpleSAMLphp, OpenAM, Centrify, Ping, RSA, IBM, Oracle, OneLogin, Bitium, WSO2, NetIQ, ClassLink or any SAML compliant Identity Provider with our WordPress Single Sign On(SAML SSO) plugin.
*   **Advanced Attribute Mapping** - WordPress SAML SP Single Sign On SSO provides the feature to map your SAML IDP attributes to your WordPress site attributes like Username, Email, First Name, Last Name, Group/Role, Display Name.
*   **Login Widgets and Short Code** - Use Widgets to easily integrate the SAML SSO link with your Wordpress site. Use Short Code (PHP or HTML) generated by SAML SP Single Sign On to place the SAML login link wherever you want on the site.
*   **Step-by-step Guides** - Use step-by-step guide provided in our WordPress Single Sign On(SAML SSO) plugin to configure your SAML compliant Identity Provider like ADFS, Centrify, GSuite / Google Apps, O365, Okta, OneLogin, Salesforce, SimpleSAMLphp, Shibboleth, WSO2, JBoss Keycloak, Oracle, ClassLink etc.
*   **Auto-redirect to IDP** - Users will be redirected to SAML compliant IdP for SSO when trying to access the WordPress login page.
*   **Protect Site** - Users trying to access Wordpress will be redirected to the SAML compliant Identity Provider for SSO.
*	**Customize SP Configuration** - Change SAML Service Provider endpoints such as SP base URL and SP Entity ID with our WordPress Single Sign On SSO plugin.
*   **Select Binding Type** - Select HTTP-Post or HTTP-Redirect binding type to use for sending SAML Requests with our WordPress Single Sign On(SAML SSO) plugin.
*   **Integrated Windows Authentication** - Support for Integrated Windows Authentication (IWA) in SAML SP Single Sign On Standard plugin.
= Premium Version Features =
*   Includes all the SAML STANDARD version features.
*   **SAML Single Logout** - Support for SAML Single Logout (Works only if your SAML IDP supports SLO).
*   **Auto-redirect to IDP** - Users will be redirected to SAML compliant IdP for SSO when trying to access the WordPress login page.
*   **Protect Site** - Users trying to access Wordpress will be redirected to the SAML compliant Identity Provider for SSO using our WordPress Single Sign On(SAML SSO) plugin.
*   **Advanced Role Mapping** - WordPress SAML SP Single Sign On SSO provides the feature to assign WordPress roles to your users based on the group/role sent by your SAML compliant IDP.
*   **Reverse-proxy Support** - Support for sites behind a reverse-proxy in WordPress SAML SP Single Sign On Premium plugin.
* 	**Multiple Certificates** - WordPress Single Sign On(SAML SSO) plugin allows you to store Multiple SAML IdP Certificates.
*	**Custom Certificate** - Add your own custom X.509 Certificate for sending signed SAML Request and verification of encrypted SAML Response using our WordPress Single Sign On SSO plugin.
*   **WordPress Multi-site Support** - Multi-Site environment is one which allows multiple subdomains / subdirectories to share a single installation. With multisite WordPress SAML premium plugin, you can configure the SAML compliant IDP in minutes for all your sites in a network. While, if you have basic SAML premium plugin, you have to do plugin configuration on each site individually as well as multiple SAML service provider configurations in the SAML compliant IDP.

    For Example - If you have 1 main site with 3 subsites. Then, you have to configure the plugin 3 times on each site as well as 3 SAML service provider configurations in your IDP. Instead, with multisite SAML premium plugin. You have to configure the plugin only once on main network site as well as only 1 SAML service provider configuration in the SAML compliant IDP.

= Enterprise Version Features =
*   Includes all the SAML STANDARD version features.
*   **SAML Single Logout** - Support for SAML Single Logout (Works only if your SAML IDP supports SLO).
*   **Auto-redirect to IDP** - Users will be redirected to SAML compliant IdP for SSO when trying to access the WordPress login page using our WordPress Single Sign On(SAML SSO) plugin.
*   **Protect Site** - Users trying to access Wordpress will be redirected to the SAML compliant Identity Provider for SSO.
*   **Advanced Role Mapping** - WordPress SAML SP Single Sign On SSO provides the feature to assign WordPress roles to your users based on the group/role sent by your SAML compliant IDP.
*   **Reverse-proxy Support** - Support for sites behind a reverse-proxy in WordPress SAML SP Single Sign On Premium plugin.
* 	**Multiple Certificates** - WordPress Single Sign On(SAML SSO) plugin allows you to store Multiple SAML IdP Certificates.
*	**Custom Certificate** - Add your own custom X.509 Certificate for sending signed SAML Request and verification of encrypted SAML Response using our WordPress Single Sign On SSO plugin.
*   **WordPress Multi-site Support** - Multi-Site environment is one which allows multiple subdomains / subdirectories to share a single installation. With multisite SAML premium plugin, you can configure the SAML compliant IDP in minutes for all your sites in a network. While, if you have basic SAML premium plugin, you have to do plugin configuration on each site individually as well as multiple SAML service provider configurations in the SAML compliant IDP.
*   **Multiple SAML IDPs Support** - We now support configuration of Multiple SAML compliant IDPs in our WordPress Single Sign On SSO plugin to authenticate the different group of users with different SAML IDPs. You can give access to users by users to IDP mapping (which SAML compliant IDP to use to authenticate a user) is done based on the domain name in the user's email. (This is a **PREMIUM** feature with separate licensing. Contact us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> to get licensing plans for this feature.)


= All-Inclusive Version Features =
*   Includes all the SAML ENTERPRISE version features
*   Recommended for most use cases such as login using Azure AD, Azure AD B2C, ADFS, Keycloak, Okta, Salesforce, GSuite / Google Apps, O365, Shibboleth, SimpleSAMLphp, OpenAM, Centrify, Ping, RSA, IBM, Oracle, OneLogin, Bitium, WSO2, NetIQ, ClassLink etc.
*	**Anonymous Login** - WordPress Single Sign On plugin allow your users to login to the WordPress site without creating a WordPress user account for them.(Guest User Login).
*   **Salesforce Community SSO** - WordPress Single Sign On plugin allows your users from multiple Salesforce communities to login to the WordPress site by authenticating with their Salesforce credentials.
*   **Azure AD Multi-tenant SSO** - WordPress Single Sign On plugin allows your users to seamlessly login into the WordPress site with multiple Azure AD tenants.
*   All SAML add-ons included.

If you are looking for a SAML compliant Identity Provider, you can try out <a href="https://idp.miniorange.com">miniOrange On-Premise IdP</a>.

= WORDPRESS SINGLE SIGN-ON (SSO) SUPPORTED ADD-ONS =
We have a variety of add-ons that can be integrated with the WordPress SAML SP Single Sign On SSO plugin to improve the SAML SSO functionality of your WordPress site.

*	**Page Restriction** -  	This add-on is basically used to protect the pages/posts of your site with SAML compliant IDP login page and also, restrict the access to pages/posts of the site based on the user roles.
*	**BuddyPress Integration** - This add-on maps the attributes fetched from the SAML compliant IdP with BuddyPress attributes.
*	**LearnDash Integration** - This add-on will map the SAML SSO user to LearnDash groups as per the attributes sent by your SAML compliant Identity Provider.
*	**SSO Login Audit** -  	SSO Login Audit captures all the SAML SSO users and will generate the reports.
*	**Attribute Based Redirection** - ABR add-on helps you to redirect your users to different pages after they authenticate via SAML SSO into your site, based on the attributes sent by your SAML compliant Identity Provider.

= <a href="https://wordpress.org/plugins/scim-user-provisioning/" target="_blank">Real Time User Provisioning using SCIM</a> =
Provides real time user-provisioning from your IDP to your WordPress using SCIM standard. You can refer our <a href="https://plugins.miniorange.com/wordpress-user-provisioning" target="_blank"> WordPress User Provisioning using SCIM </a> plugin.

Contact us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> to get SAML add-ons.

= Website - =
Check out our website for other plugins <a href="http://miniorange.com/plugins" >http://miniorange.com/plugins</a> or <a href="https://wordpress.org/plugins/search.php?q=miniorange" >click here</a> to see all our listed WordPress plugins.
For more support or info email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="http://miniorange.com/contact" >Contact us</a>. You can also submit your query from plugin's configuration page.

== Installation ==

= From your WordPress dashboard =
1. Visit `Plugins > Add New`.
2. Search for `SAML SP Single Sign On`. Find and Install `SAML SP Single Sign On – SSO login`.
3. Activate the plugin from your Plugins page.

= From WordPress.org =
1. Download SAML SP Single Sign On – SSO login plugin.
2. Unzip and upload the `miniorange-saml-20-single-sign-on` directory to your `/wp-content/plugins/` directory.
3. Activate miniOrange SSO using SAML 2.0 from your Plugins page.

== Frequently Asked Questions ==

= I am not able to configure the Identity Provider with the provided settings =
Please email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="http://miniorange.com/contact" >Contact us</a>. You can also submit your app request from plugin's configuration page.

= Can the plugin be configured to support multiple Identity Providers? =
You can configure multiple Identity Providers like Azure AD, Azure B2C, Okta, ADFS, Keycloak, Ping, etc in the plugin and provide different SSO login flow to the users. 

= Is the plugin compatible with hosting providers like WP Engine, Pantheon, Wordpress VIP, etc? =
The Enterprise and All-Inclusive plans of our SSO plugin are best suitable for multiple environments in a hosting provider.

= Is it possible to redirect users to a particular URL after login or logout =
With our SSO plugin, you can set Relay State URL's to redirect users after login as well as after logout. 

= I need integration with different third party plugins like Learndash, BuddyPress, WooCommerce, Memberpress, etc installed on my WordPress site =
We already provide support for most of the third party plugins. Please email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="http://miniorange.com/contact">Contact us</a>
and we will assist you with the integration.

= For any query/problem/request =
Visit Help & FAQ section in the plugin OR email us at <a href="mailto:info@xecurify.com">info@xecurify.com</a> or <a href="http://miniorange.com/contact">Contact us</a>. You can also submit your query from plugin's configuration page.

== Screenshots ==

1. Connect your WordPress site with any SAML-compliant Identity Provider.
2. Configure your Wordpress as SAML Service Provider.
3. Gather Metadata for your SAML Identity Provider.
4. Configure Attribute/Role Mapping for Users in Wordpress.
5. Add widget to enable SAML Single Sign-on.
6. Plugin-tour which guides you through entire plugin setup.
7. Addons which extend plugin functionality.

== Changelog ==

= 4.9.08 =
* Demo request improvements

= 4.9.07 =
* Licensing Update

= 4.9.06 =
* UI changes and fixes
* Readme changes

= 4.9.05 =
* UI improvements and fixes
* WordPress 5.7 Compatibility

= 4.9.04 =
* Licensing Update

= 4.9.03 =
* Added video plugin guides

= 4.9.02 =
* Welcome page fixes

= 4.9.01 =
* Added support of Localization
* WordPress 5.6 Loop back issue fix
* PHP 8 Compatibility
* Fixed SAML Login URL query parameters bug
* Removed end of year sale

= 4.9.00 =
* Rolled out end of year sale

For older changelog entries, please see the [additional changelog.txt file](https://plugins.svn.wordpress.org/miniorange-saml-20-single-sign-on/trunk/changelog.txt) provided with the plugin.

== Upgrade Notice ==

= 4.9.08 =
* Demo request improvements

= 4.9.07 =
* Licensing Update

= 4.9.06 =
* UI improvements and fixes
* Readme changes

= 4.9.05 =
* UI changes and fixes
* WordPress 5.7 Compatibility

= 4.9.04 =
* Licensing Update

= 4.9.03 =
* Added video plugin guides

= 4.9.02 =
* Welcome page fixes

= 4.9.01 =
* Added support of Localization
* WordPress 5.6 Loop back issue fix
* PHP 8 Compatibility
* Fixed SAML Login URL query parameters bug
* Removed end of year sale

= 4.9.00 =
* Rolled out end of year sale

= 4.8.99 =
* Added new Add-on description

= 4.8.98 =
* SP Metadata Update

= 4.8.97 =
* Call setup fixes
* Added contact phone number

= 4.8.96 =
* Added new IDP guides: Azure B2C and Gluu server
* Updated XMLSecLibs

= 4.8.95 =
* Added Setup call feature

= 4.8.94 =
* Revamped add-ons tab

= 4.8.93 =
* Updated description for add-ons

= 4.8.92 =
* Security patches

= 4.8.91 =
* Added a new licensing plan

= 4.8.90 =
* Plugin tour fixes

= 4.8.89 =
* Adding more guides in SAML plugin

= 4.8.88 =
* Bug fixes

= 4.8.87 =
* Bug fixes in SAML SSO widget
* Compatibility with WordPress 5.4

= 4.8.86 =
* Compatibility fixes with PHP5

= 4.8.85 =
* Visual Tour fixes
* Fixed Telephone number input

= 4.8.84 =
* Security patches

= 4.8.83 =
* Nomenclature changes
* Compatibility with PHP 7.4

= 4.8.82 =
* Added new SAML-compliant IdP guides
* Bug fixes

= 4.8.81 =
* Updated SAML-compliant IdP guides

= 4.8.80 =
* Bug fixes

= 4.8.79 =
* Added Plugin-wide tour

= 4.8.78 =
* Request a demo feature.

= 4.8.77 =
* Bug Fixes

= 4.8.76 =
* Security Patches

= 4.8.75 =
* Visual-tour fixes

= 4.8.74 =
* Feedback form bug fix

= 4.8.73 =
* Security patches.

= 4.8.72 =
* Security patch.

= 4.8.71 =
* Security fixes.

= 4.8.70 =
* Bug fixes
* Option to send plugin configuration with request

= 4.8.69 =
* Tested upto Wordpress 5.1.0
* Replaced CURL calls with HTTP API calls.

= 4.8.68 =
* Tested upto Wordpress 5.0.2.
* Updated to Latest XMLSeclibs library.
* Compatibility with PHP 7.3.

= 4.8.67 =
* Description changes.

= 4.8.66 =
* Tested upto Wordpress 5.0.0.
* Added option to disable character encoding.

= 4.8.65 =
* Bug Fixes

= 4.8.64 =
* Compatibility with PHP version 5.3+ upto latest version of PHP
* Activation Issue Fixes

= 4.8.63 =
* Code enhancements.

= 4.8.62 =
* Fixed issues on SAML SP SSO plugin activation.

= 4.8.61 =
* Bug fixes.

= 4.8.60 =
* Updated to latest XMLSeclibs SAML library (version 3.0.1).
* Added the visual tour to get familiar with plugin features and support.
* Revamped the plugin UI.
* Added the Add-On and their description.
* Export plugin configurations.
* IdP guides.

= 4.8.52 =
* Tested upto Wordpress 4.9.8

= 4.8.51 =
* Added support for guest login
* Added IDP guide links

= 4.8.50 =
* Added feedback form.

= 4.8.44 =
* Tested upto WordPress 4.9.6

= 4.8.43 =
* Compatibility issue with PHP 7.2(Removed deprecated asserts )

= 4.8.42 =
* Input validation fixes.

= 4.8.41 =
* Support for PHP version 5.3 and above.

= 4.8.40 =
* Added feature for Exporting plugin configuration.
* Added View SAML Request and Response

= 4.8.35 =
* Fixed the Entity ID/Issuer issues for AzureAD Idp.

= 4.8.34 =
* Introducing miniOrange on-premise IDP

= 4.8.33 =
* Compatibilty with Wordpress 4.9

= 4.8.32 =
* Introducing Standard version of SAML Plugin for small sized customers.
* Fixed Registration issue.

= 4.8.31 =
* Introducing Standard version of SAML Plugin for small sized customers.Check Licensing Plans for more details.

= 4.8.30 =
* Fix the CSS and JS inclusion only in the plugin pages, removed it from frontend and backend of wordpress.

= 4.8.28 =
* Bug fix for PHP 5.4.x version.

= 4.8.27 =
* Support for Multiple Certificate via Metadata

= 4.8.26 =
* SAML Configuration by Uploading metadata.
* Descriptive Error Messages.
* Use miniorange as IdP feature.
* More verbose instructions.
* Compatibility with WordPress 4.8

= 4.8.25 =
Updating Licensing Plans


= 4.8.24 =
Updating Plugin Title

= 3.8.14 =
Pattern change on OTP Verification page

= 3.8.12 =
Major security fixes. It is recommended to update to this version.

= 3.8.7 =
Fixes for WordPress 4.5

= 3.8.6 =
Added features: Support for WordPress Multi-site (Network setup), support for Multiple IDPs and some fixes for WordPress 4.5

= 3.8.4 =
Introducing Free Trial for the premium version.

= 3.8.2 =
Security fix for preventing non-admin users from changing the settings.

= 3.8 =
Security fix for IDPs that signs only Assertion and not the complete SAML Response XML.

= 3.7 =
Support for Integrated Windows Authentication - contact <a href="mailto:info@xecurify.com">info@xecurify.com</a> if interested

= 3.5 =
Decrypt assertion bug fix

= 3.4 =
Added some requested features and some bug fixes.

= 3.0 =
Major Update. We have taken ut-most care to make sure that your existing login flow doesn't break. If you have issues after this update then please contact us. We will get back to you very soon.

= 2.1 =
Removed unwanted JS files.

= 2.0 =
Added new feature like role mapping and auto redirect user to your IdP.

= 1.7 =
Resolved UI issues for some users

= 1.6 =
Added help and troubleshooting guide.

= 1.5 =
Added error messaging.

= 1.4 =
Added fixes.

= 1.3 =
Added validations and fixes.
UI Improvements.

= 1.2 =
Some UI improvements.

= 1.1 =
Added Attribute mapping / Role mapping and test application.

= 1.0 =
I will update this plugin when ever it is required.
