talaaa.Claim Your Free 999 Pesos Bonus Today

Custom mapping for user_login

sanderkollerie — Fri, 14 Jun 2024 15:44:03 +0000

Replies: 0

I have the below SAML response and i need to map the UserLoginID to user_login. How do i do that in the settings UI? Thanks.



	https://test.website.nl/login/
	
		
			
			
			
				
					
					
						
					
				
				
				NjwjDeSYjx99JetZ/ThhgexrKE0tVDubdRQKLJBaq0I=
			
		
		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
					AQAB
				
			
		
	
	
		
	
	
		https://test.website.nl/login/
		
			116924
			
				
			
		
		
			
				https://website.school/wp-login.php?saml_acs
				https://website.school/wp-login.php?saml_acs/
			
		
		
			
				urn:oasis:names:tc:SAML:2.0:ac:classes:Password
			
		
		
			
				116924
			
		
		
			
				90LB00
			
		
		
			
				15415

Switch from Apache to NGINX environment

nemseck — Tue, 16 Apr 2024 09:07:48 +0000

Replies: 3

I’ve used this plugin to successfully configure a connection between a private portal and an SSO service provided by a third party subject. Everything worked perfectly without flaws but due to a tech switch we moved from the apache-based environment to an nginx one.

Then the plugin stopped working properly. These are the steps that lead to the error:

[my site] click on a “authenticate” button
[third party service site] insert username and password
[my site] correct fallback to the declared page but the authentication goes wrong with this weird message: User is not authenticated with SAML IdP. Reason: The response was received at https://www.my-portal.example/my-login.php instead of https://www.my-portal.example/my-login.php

Basically the system is telling me that the matching urls (for some reasons) are not matching! Is something related to NGINX port forwarding adjustments? Thanks

authenticate against my idp for browsing into WP and keep local admins

azzaerre — Wed, 03 Apr 2024 12:02:30 +0000

Replies: 0

Hello,

I configured simplesamlphp as a sp to connect to our saml2 univ idp, the connection test is working.

Now I would just like to use WP SAML Auth to enable a reserved access to our wordpress website (just viewing) and leave the wp-admin access withour using sso (and just keep the local accounts). Can you tell me if it’s possible and how i can configure that? Because without plugin and just an autoload config in index.php is not working

Thank you very much

WP SAML Auth blocking Events Calendar API

rmurr1 — Fri, 02 Feb 2024 15:15:00 +0000

Replies: 0

Since installing WP SAML Auth, our Events Calendar plug in can not verify the API in order to function properly. Is there an Allow list or known fix for this?

will this plugin work to replace front in logins

rudtek2 — Thu, 01 Feb 2024 16:56:15 +0000

Replies: 0

How can I replace the login for front end? Esp woocommerce? they have their woocommerce-esque “/my-account” page. Is there a way to attach this login to that page?

Custom redirectTo field after succesfull login

Rok Megli? — Fri, 26 Jan 2024 11:56:36 +0000

Replies: 3

Project Requirement: Custom Redirect URL After Successful Login

For one of our projects, we aim to enhance user experience by allowing administrators to specify a custom redirect URL for users after a successful login.

Proposal: Add Custom Field to WordPress Settings

We propose adding a custom field to the WordPress Settings section. This field would enable administrators to define the URL to which users will be redirected upon successful login.

Current Implementation: Limitations

The existing documentation references a redirectTo parameter, which is promising. However, our investigation reveals that this parameter is not currently customizable by administrators.

Action Plan: Enhancing Administrator Control

Our objective is to empower administrators to determine the post-login redirect URL. To achieve this, we will explore avenues to make the redirectTo parameter configurable through WordPress Settings.

Next Steps: Development Considerations

Code Review: Examine the existing codebase, focusing on the redirectTo parameter and its implementation.
Custom Field Addition: Integrate a customizable field within the WordPress Settings interface to capture the desired redirect URL.
Backend Modification: Adjust the backend logic to utilize the administrator-defined redirect URL when processing successful logins.
Testing: Testing will be conducted to ensure seamless functionality and compatibility with various scenarios on our project site.

SimpleSAMLphp Documentation

ReturnTo (string) The URL the user should be returned to after authentication. The default is to return the user to the current page.

Note : The URL returned by this function is static, and will not change. You can easily create your own links without using this function. The URL should be:

…/simplesaml/module.php/core/login/?ReturnTo=

This topic was modified 10 months ago by Rok Megli?.

Multisite – Return to subdirectory based sub-site

Battlecat — Sun, 17 Dec 2023 23:42:47 +0000

Replies: 0

Hello:

I am running a sub-directory based WP-Multisite with approx 300+ sub-sites. We are attempting to use the plugin with our Google SSO SAML login.

Would I require a separate .pem file in my root directory for each site I want to lock down with SAML, or would a .pem file from Google SSO have to contain information about the sites that need to be locked down?

Right now we have it working in the root directory, but if I activate the plugin in a sub-directory based subsite such as https://website.com/subdirectoy-site/ I get an error “Error: app_not_configured_for_user“.

Thanks for reading.

Uncaught Exception: Detected use of DOCTYPE/ENTITY in XML, disabled to prevent

meenasekar — Mon, 20 Nov 2023 07:37:56 +0000

Replies: 1

Hi,

We are using the WP SAML AUTH plugin to login to the application. In this plugin, we are getting the following error message when logging in to the application:

Fatal Error message: Uncaught Exception: Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks in wp-content\plugins\wp-saml-auth\vendor\onelogin\php-saml\src\Saml2\Utils.php:98

Application details:
WordPress Version: 6.3
Php Version: 8.1.24
Apache version: 2.4.56

Please help us to resolve this issue.

This topic was modified 1 year ago by meenasekar.

Adding another attribute to Attribute Mapping

ski11ian — Tue, 15 Aug 2023 15:41:24 +0000

Replies: 0

Hi, is there a way to add another attribute under Attribute Mapping and have it populate from the user’s information? With their website for instance?

Plugin issue

priyankac — Thu, 27 Jul 2023 11:37:19 +0000

Replies: 0

Hello Team,
Once installed the plugin I got this error ” WP SAML Auth wasn’t able to find the SimpleSAML_Auth_Simple class. Please check the simplesamlphp_autoload configuration option, or visit the plugin page for more information.”

how can I fix it?

This topic was modified 1 year, 3 months ago by priyankac.

Integration with AzureAD

hashimoto1177 — Wed, 28 Jun 2023 07:17:17 +0000

Replies: 1

We are trying to see if we can do SSO in conjunction with AzureAD. I have entered each value in the settings on the plugin and AzureAD side, but the button for login does not appear on the login screen.
When testing from AzureAD, there is no error, but the user page does not sign in and the login screen is displayed.
To begin with, is this plugin compatible with AzureAD?
Also, is it possible to investigate the cause?

Bypass the SSO

kajori — Fri, 26 May 2023 07:34:13 +0000

Replies: 1

Hi All,

We need a help with by passing the SSO .

The requirement is like this for a particular request we have to do it.

Flow is like this

We get the particular request X with a token Y, (The token is constant always)
When we get the Y token we need to bypass the SSO and wordpress login page so that the request can access the application directly. (The frontend mainly)

The above points should only be applicable for a particular request.

The SSO functionality should work as it should for other users and requests.

Do we have any specific hook or configuration settings which can help us achieve this?

Please let us know. Thanks.

Expired SAML certificate

dejamnesia — Mon, 10 Apr 2023 08:42:16 +0000

Replies: 2

Our SAML certificate expired and we are now not able to login to the WordPress Admin. How can we update the metadata file in the CMS?

This topic was modified 1 year, 7 months ago by dejamnesia.

Version 2.1.2 – Missing vendor folder

thr87 — Sat, 08 Apr 2023 15:34:51 +0000

Replies: 3

In Version 2.1.2, it appears that the vendor folder was not included, causing issues so that no login is possible.

Including vendor folder from version 2.1.1 solves the issue.

Automatically log user out when SAML session is no longer valid

Jeff Sterup — Tue, 14 Feb 2023 15:20:55 +0000

Replies: 1

I’ve got this working to log users in but if I kill the session or it passes the session expire time set by SimpleSAML the WordPress session stays active. Is there a function I can call to check whether the SAML session has expired or has been revoked through SimpleSAML? If there is I can set a transient and check the session every 5 minutes or so.

Is it possible to login with the default wordpress username and password

Junaid TK — Tue, 07 Feb 2023 13:38:07 +0000

Replies: 0

I am using this plugin to login in to the admin page with the help of button. Now I am creating a login authentication API with the default username and password. Is it possible to use the default wordpress user name and password for login into the website.

I have tried to login into the website. But it is failing to get the success.

Can this plugin be use in ADFS as the IDP?

Carl Alberto — Fri, 13 Jan 2023 18:13:41 +0000

Replies: 2

Trying to setup an ADFS as IDP using this plugin and saw that simplesaml has a SimpleSAMLphp adfs module but it seems the SimpleSAML usage is not straightforward and not yet well documented. We are wondering if it is possible to get it configured or if this might be a Feature Request?

Thanks!

Can we use an email alias to login into WordPress?

vinhliverpool — Tue, 13 Dec 2022 09:11:51 +0000

Replies: 2

I have an email alias. I’d like to use this to login into a WordPress site instead of my primary email.
Is it doable?
Thank you!

simplesamlphp upgrade from 1.19.1 to 1.19.6 is giving issue

arunasrim — Wed, 21 Sep 2022 07:52:51 +0000

Replies: 1

Recently simplesamlphp has been upgraded to 1.19.6 from 1.19.1, we placed all needed certs, metadata, config files and applied all folder permissions and it is not working at all. after entering login credentials site is giving following error.

Warning: require_once(/www/proj/simplesaml/lib/_autoload.php): failed to open stream: Permission denied in /www/proj/html/wp-content/plugins/wp-saml-auth/inc/class-wp-saml-auth.php on line 89

Fatal error: require_once(): Failed opening required '/www/proj/simplesaml/lib/_autoload.php' (include_path='.:/usr/share/pear:/usr/share/php') in /www/proj/html/wp-content/plugins/wp-saml-auth/inc/class-wp-saml-auth.php on line 89
There has been a critical error on this website. Please check your site admin email inbox for instructions.

Learn more about troubleshooting WordPress.

Also when I tried to open sites simplesaml/ page it is giving 403 forbidden access error.

Developer access

marameodesign — Tue, 06 Sep 2022 08:36:24 +0000

Replies: 0

Hi,

How do you give admin access to developers without creating an ID in Google?

I would like to avoid leaving the WP login active, but also I need to be able to login. Ideally, connecting 2 iDP (even though both Google) would work well as we are on GSuite too.

Any suggestions?

Plugin Metadata

roblansichtssache — Wed, 24 Aug 2022 11:18:28 +0000

Replies: 0

Hello,

does the Plugin generate an XML file with metadata for the idP?
I need this to ensure a safe connection or a connection at all.

The data I need are for example entityID, certificate and binding-URLs.

Or is it possible to get the information out of the plugin files?

Best regards
Michael

WP SAML Auth wasn’t able to find the SimpleSAML_Auth_Simple class

troutacular — Wed, 04 May 2022 19:10:04 +0000

Replies: 1

When activating this plugin, we get the following error:

WP SAML Auth wasn't able to find the SimpleSAML_Auth_Simple class. Please check the simplesamlphp_autoload configuration option, or visit the plugin page for more information.

Looking at the support tickets, whenever SimpleSAMLphp is mentioned, it is recommended to use the OneLogin bundled version which doesn’t have SimpleSAML_Auth_Simple.

How do you proceed with the scenario?

Easiest way to add “advanced” OneLogin options?

David E. Smith — Fri, 25 Mar 2022 16:11:23 +0000

Replies: 7

The OneLogin SAML library has two config exammples (in vendor/onelogin/php-saml) – a basic one, and an advanced one. This plugin exposes (most of) the basic settings, but before my current project goes to production I suspect I’ll need to enable a few of the advanced ones.

(advanced_settings_example.php has lots of additional security settings, including what looks like the ability to sign SAML requests, and to specify the location of a SP-side cert/key, which my identity team is likely to require.)

There’s a wp_saml_auth_option filter but I’m not sure if it only affects the config values specified in the wpsa_filter_option function right above it, or if I can use it to set other arbitrary configuration settings that aren’t part of the plugin’s GUI. i.e. I’m not sure where all the different configurations are collated and presumably handed off to some part of the OneLogin library. (Does that all live in internal_config?)

Is it even possible to add other/arbitrary OneLogin config settings via this plugin, or am I getting too crazy? I apologize for what is probably a beginner-level question, but I’ve been staring at code for hours and I’m still not “getting it”.

Connecting simplesamlphp with plugin

chancelor — Tue, 22 Mar 2022 06:36:46 +0000

Replies: 0

I feel like I am missing a step somewhere. I have simplesamlphp installed and confirmed I am able to go to the IDP, login and retrieve attributes through their interface. I have the filters set for the plugin correctly to use simplesamlphp (I believe).

But when I try to log in I get the invalid provider specified error code. I feel like I’m missing one small step, any ideas?

How to get other IdP-provided attributes from a SAML response into WP?

David E. Smith — Wed, 02 Mar 2022 22:23:23 +0000

Replies: 5

As part of a possible migration from the Shibboleth plugin to this one (which in turn is part of a possible hosting migration), I’m working on replicating functionality of the old Shibboleth plugin.

Right now, Shibboleth’s SAML implementation can handle whatever arbitrary data are included in the IdP’s response, and exposes them as elements under $_SERVER. (Example: My IdP’s SAML responses include not only names and email addresses, but some org-specific information like department, sometimes employee ID, sometimes AD group memberships, and so on.) Then I can just query $_SERVER[‘ADGroups’] or $_SERVER[‘PrimaryRole’] or whatever other arbitrary data are coming in.

(Part of that is the Shib daemon’s attribute map, so if this plugin can only get urn:oid: style field names instead of friendly names, that’s an understandable limitation. Probably depends on whether the IdP sends friendly names in its responses.)

In at least a few specific cases, this plugin can do that, since that’s what the “Attribute Mappings” settings are — you put in the ID of an element in the SAML response, and it’s used for a WordPress-specific thing (like first name or email address). But I’d like to be able to extend that to other fields that might be received in the response. My ideal would be that every attribute from the SAML response gets populated right into $_SERVER for compatibility, but I could be talked into a different implementation. Any suggestions on how to approach this?

x509 Cerificate Path

iconicmatt — Mon, 14 Feb 2022 20:20:07 +0000

Replies: 1

I am trying to get the plugin configured to find my idP’s x509 certificate. I see that it needs to be not web accessible. Do I simply add the certificate to a www.ads-software.com directory somewhere? How and where do I add it so that it is findable by the plugin?

Thanks,
Matt

Logout URL redirect to homepage

elenawoodenamsterdam — Tue, 08 Feb 2022 10:51:22 +0000

Replies: 3

Hi team,

When users log out of our eCommerce store they get redirected to this URL starting with: https://deu.authpoint.watchguard.com/spInitiated?isLogout=true&accountId=

I’d like that they end up on our homepage. Could you please advise?

Thanks,

Elena

Issue with the minimal PHP Version 7.3 and the composer/platform_check.php 7.4

iegorka — Thu, 20 Jan 2022 18:43:51 +0000

Replies: 2

Hello,

Thank you for this plugin.

It seems that the composer requires PHP 7.4. The file wp-saml-auth/vendor/composer/platform_check.php contains this check:


if (!(PHP_VERSION_ID >= 70400)) {
    $issues[] = 'Your Composer dependencies require a PHP version ">= 7.4.0". You are running ' . PHP_VERSION . '.';
}

Is it possible to regenerate the file platform_check.php or disable it?

Thanks in advance.

Remove login button from the wp-login page

helen35 — Sat, 20 Nov 2021 14:46:32 +0000

Replies: 1

Hi there,
awesome job with this plugin. I did the setup with Google Workspace and is working fine. I was wondering if there is a way to remove the sign in button from the wp-login page. I just want my google workspace users to login with the SAML app in their Google Dashboard.
Thank you so much
Have a great day

Keycloak Settings

Cory — Thu, 09 Sep 2021 05:49:50 +0000

Replies: 0

Has anyone successfully used this plugin with a Keycloak server? We’ve been spinning our wheels for a few weeks trying to get the settings right, with no luck.

Would love to chat with someone who’s made it work.