SAML and Salesforce

Hello there,

I am integrating WordPress and salesforce utilizing the SAML SSO 2.0 plugin. We have Salesforce successfully sending the assertion via IdP initiated login, however, it seems that once on the WordPress side, we continually get the error ‘ERROR: Invalid username or incorrect password.’. In the saml_client.php file, I notice that a user is being created using the username, email, firstname and lastname attributes that are sent in the assertion, and then the ‘simulate_signon’ method is being called to log the user in using the wp_signon method. I am making sure the assertion from Salesforce contains these attributes, but it seems the wp_signon method is where the error is being generated. The user is being created successfully (i can see the user record if I look them up in the wp-admin area), and the username is correct, the only thing I can think of is that the password does not match.

I notice the password is generated using an encryption of the WordPress AUTH_KEY and the username. What happens if the AUTH_KEY is not present? Has anyone else experienced this problem? Specifically the problem with the assertion being successful and the user being created, but the actual wp_signon authentication going wrong? I tried to replace the code in the user_password function with a constant value to test, but I am still getting the same error. What am I overlooking?

Thanks in advance.

https://www.ads-software.com/plugins/saml-20-single-sign-on/