abjork

Setting the protocol version to SAML 1.1 solved the issue with new user provisoning. Thanks @mmcglynn for pointing me in the right direction!

I set up PHPCAS separately, outside of WordPress, and was able to get the additional attributes from CAS show up using the SAML_VERSION_1_1 protocol (thanks @mmcglynn). When using CAS_VERSION_1_0 and CAS_VERSION_2_0, PHPCAS was not able to pick the attributes up at all…

Reference code: https://developer.jasig.org/cas-clients/php/1.3.5/docs/api/example_advanced_saml11_8php-example.html

Since the current version of Authorizer uses PHPCAS 1.3.5, I’m now hoping that Authorizer will be able to pull in those extra attributes (providing protocol is set to SAML 1.1). Unfortunately, when updating my firstname/lastname in WP, these do not get updated when re-authenticating, even though this option is checked in the Authorizer settings. Bug? I will test more tomorrow and see what happens with new user provisioning.

Thanks @yamanisa and @figureone for your replies, I really appreciate it. I checked out the Ultimate Member plugin but decided to go the route of one user = one role to minimize compatibility risks moving forward (not just with this plugin but with others as well).