SAML authentication for WordPress.
As of April 2026, WP SAML Auth is a WordPress SAML plugin with 7.0K+ active installations and a 4.5/5 rating from 8 reviews. It has been downloaded 201K+ times in total. Requires WordPress 6.4+ and PHP 7.4+. Available on WordPress.org since 2016. Actively maintained — updated within the last month. Downloads are down 25% this week. Support resolution rate: 0%. Top alternative: SAML Single Sign On – SSO Login.
SAML authentication for WordPress, using the bundled OneLogin SAML library or optionally installed SimpleSAMLphp. OneLogin provides a SAML authentication bridge; SimpleSAMLphp provides SAML plus a variety of other authentication mechanisms. This plugin acts as a bridge between WordPress and the authentication library.
If your organization uses Google Apps, integrating Google Apps with WP SAML Auth takes just a few steps.
The standard user flow looks like this:
Great plugin, that works really well. It has some useful filters for developers to hook into, which I appreciate and it does the same job as other paid plugins so I also really appreciate that this is free!
I struggled to figure out how to use this with Azure AD but after a lot of trial and error figured it out.
Works great with Azure AD / Microsoft 365. Would be even better if the default role could be defined on the settings page. Could be useful having the option to disable logging out from the ID provider.
Switching from miniOrange
Right after installing and activating the plugin, I keep getting warning messages such as some library files are missing and the WP SAML Auth is not active.
Also, the lack of any instructions makes it impossible to configure it with my Okta account.
Just a waste of time!
Deactivating and trying out other SAML plugins.
Does exactly what I need.
| WordPress | 6.4+ requiredTested up to 6.9.4 |
| PHP | 7.4+ required |
wp_saml_auth_auto_add_to_blog filter to control whether auto-provisioned users are added to sites in multisite environments [#465].wp_saml_auth_auto_add_to_blog returns false, the wp_saml_auth_new_user_authenticated action will receive a user with no role on the current site. Hooks relying on $user->roles being non-empty should account for this [#465].Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.