Shibboleth

By mitcho (Michael Yoshitaka Erlewine)

Visit the website

Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider.

4.3

Rating summary

Reviews

Active installations

Download the Plugin

Overview

Compatibility

Installation instructions

Customer support & learning resources

Changelog

Main benefits

Integrates identity management

Automatic user provisioning

Synchronizes user attributes

Role-based access control

Actively maintained on GitHub

About this plugin

Categories: Integration and APIs

Version: 2.4.3

Last updated: 31-10-2023

WordPress version: 4.0

Tested up to: 6.4.5

PHP version required: 5.6

Languages: 日本語

Tags:

Shibboleth Login Authentication SAML

Learning resources: View resources

Overview

This WordPress plugin is designed for seamless integration of your WordPress site with your existing identity management infrastructure through a Shibboleth Service Provider. The plugin facilitates the redirection of all standard login requests to your configured Shibboleth Identity Provider or Discovery Service, ensuring secure authentication procedures. Upon successful login, it automatically provisions a new WordPress account if one does not already exist and synchronizes user attributes such as username, first name, last name, display name, nickname, and email address with your enterprise’s system of record. Additionally, the plugin allows dynamic setting and continual updating of user roles based on attributes provided by Shibboleth, such as assigning the role of editor to faculty and contributor to students, or even restricting access based on specific entitlements. Actively maintained and open for contributions on GitHub by michaelryanmcneill and the WordPress community, this plugin enhances user management by integrating enterprise-level identity verification and role assignment.

Seamless Integration with Identity Management

Integrates WordPress with existing Shibboleth Service Provider.
Redirects all standard login requests to Shibboleth Identity Provider or Discovery Service.

Automatic User Provisioning

Automatically creates a new WordPress account upon successful authentication if one does not exist.
Synchronizes user attributes (username, first name, last name, display name, nickname, and email address) with the enterprise system of record.

Dynamic Role Assignment

Automatically sets and updates user roles based on Shibboleth attributes.
Allows mapping of specific Shibboleth attributes to WordPress roles (e.g., faculty to editor, student to contributor).

Community-Driven Development

Actively maintained by michaelryanmcneill and the WordPress community.
Open to contributions and issue reporting via GitHub.

Features list

Feature

Free version

Premium version

Basic SSO functionality

Provides single sign-on capabilities for users.

Manual configuration of IDP

Allows manual setup of Identity Provider settings.

Attribute Mapping

Enables mapping of user attributes from IDP to application.

Role Mapping

Facilitates assignment of roles based on user attributes.

Custom Attribute Mapping

Allows customization of attribute mapping for specific needs.

Basic support

Includes standard customer support services.

All Standard features

Includes all the basic features available in the standard plan.

Auto-sync for metadata URL

Automatically synchronizes metadata from a specified URL.

SP-initiated SSO

Allows single sign-on initiated by the service provider.

Auto-Redirection from site

Automatically redirects users from the site to the SSO login page.

Auto-Redirection from WordPress Login

Automatically redirects users from the WordPress login page to the SSO login page.

Customized login button

Provides a customizable login button for SSO.

SSO links with Shortcode and Widget

Enables SSO links using shortcodes and widgets.

Backdoor login URL

Provides a backdoor URL for login in case of SSO issues.

Pricing

Free

$0 / one-time

Plan includes

Basic SSO functionality

Manual configuration of IDP

Attribute Mapping

Role Mapping

Custom Attribute Mapping

Basic support

Buy Now

Premium

$199 / one-time

Plan includes

All Standard features

Auto-sync for metadata URL

SP-initiated SSO

Auto-Redirection from site

Auto-Redirection from WordPress Login

Customized login button

SSO links with Shortcode and Widget

Backdoor login URL

Buy Now

In some cases companies have different prices based on various components like a location. As a result the prices displayed here can differ from the ones you see on their websites.

See all pricing options

Rating and reviews

4.3

Rating summary

Reviews

Active installations

User sentiment analysis

Users appreciate the Wordpress plugin for its simplicity in installation and configuration, as well as its effectiveness in multisite setups. The plugin offers essential features like auto-login, managed user attributes, and roles, which users find very useful and easy to work with. Positive interactions with the plugin authors and the community's contributions through regularly updated code are also notable highlights. However, there are some drawbacks, including inadequate security on multisite installations, where any administrator can alter global settings. There is also a concern over irregular developer support, as the plugin lacks frequent updates and responses from the developers.

diders

28 Aug, 2023

It’s simple and works in multisite setups as well.

jakeparis

26 Oct, 2022

We had no trouble installing and configuring the plugin. When we ran into an issue, it was no trouble to interact with the plugin authors.

rslater_illinois

07 Oct, 2022

I am ashamed to say I have been using this excellent plugin for years without a single issue yet never took a moment to leave a review, which I am remedying now. Excellent work. Thank you all for this wonderful contribution to the WordPress ecosystem. I know I and thousands of other folks (far more than your WP use count indicates — I’ve added this to hundreds of sites over the years myself) in Higher Ed appreciate this plugin!

nilssiegle

15 Feb, 2018

Simple to set up, and does exactly what it is supposed to do. I had some issues during setup, but they originated from my lack of knowledge of Shibboleth. Auto-Login, managed user attributes and roles, everything I need works very easy.

Jonathan Champ

15 Aug, 2015

Edit May 2018: New maintainer, updated code and new features moves this from 4 stars to 5 stars. Works well with Multi-site and various setups. Original review from August 2015: Install it, configure it and it works. The maintainer seems to have taken a hiatus, would be good to have a backup person on the committer list. The version on github is a bit newer and includes some community fixes. Needs a few improvements for multisite, but it does work. Would like a couple more options: “Notify admin on new account create?” “Create account on login?” “Image to use with login text?” This topic was modified 6 years, 2 months ago by Jonathan Champ. Reason: New maintainer and new versions = updated score

Shibboleth

Overview

Compatibility

Installation instructions

Customer support & learning resources

Changelog

Main benefits

About this plugin

Overview

Seamless Integration with Identity Management

Automatic User Provisioning

Dynamic Role Assignment

Community-Driven Development

Features list

Pricing

Plan includes

Plan includes

Rating and reviews

User sentiment analysis

More plugins like this

Login for Google Apps

Firebase Authentication: Pricing, Reviews and More

Login with Amazon

Login by Auth0

FAQ

What is Shibboleth?

How do I configure a Shibboleth Service Provider?

Can I extend the Shibboleth plugin to provide custom logic?

Can I control the plugin settings with constants in wp-config.php?

How does the Shibboleth plugin handle user roles?

Can I contribute to the Shibboleth plugin?

Does the Shibboleth plugin support automatic user account creation?

What are the system requirements for the Shibboleth plugin?