/ Plugin Category

/ User Management & Authentication

/ User Registration & Login

/ OneLogin SAML SSO

OneLogin SAML SSO

By sixtomartin

User Management & Authentication / User Registration & Login

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

OneLogin SAML SSO Review - In-Depth Analysis

This plugin provides single sign-on via SAML for WordPress. Users can log in using their Active Directory or LDAP credentials, enhancing security and user access.

Performance Overview

WPS Score

6.86/10

User Rating

4.4/5 (based on 14+ reviews)

Active Installations

7,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

9.2 / 10 (Critical Risk) It is calculated using the weighted average of all versions.

What It Does

This SAML plugin eliminates passwords and allows you to authenticate WordPress users against your existing Active Directory or LDAP server. It increases security using YubiKeys or VeriSign VIP Access via OneLogin. OneLogin is pre-integrated with thousands of apps and handles all of your SSO needs in the cloud and behind the firewall.

With this plugin, you can eliminate passwords in WordPress and allow users to sign into WordPress with their Active Directory or LDAP credentials. Users can enjoy one-click access from your intranet, and security is enhanced using browser PKI certificates or two-factor authentication from Yubico or VeriSign.

This plugin also helps you easily prevent access from former employees and contractors, ensuring your site remains secure.

Comparing to Alternatives

OneLogin SAML SSO is a solid choice among SAML SSO plugins, with a few notable alternatives available for users seeking different features or support.

Top alternatives

Strengths

Open source with easy configuration and basic essential features
Works well out of the box with various Identity Providers like EmpowerID and Azure AD
Simple and straightforward setup for users familiar with SAML
Positive user feedback highlights reliability and ease of use
Active development with updates to maintain compatibility

Weaknesses

Limited advanced features compared to some competitors
No official pro version with premium support or additional features
Configuration can be challenging for users unfamiliar with SAML or Active Directory
Security history includes critical vulnerabilities requiring prompt updates

User Sentiment Analysis

With an overall rating of 4.4 out of 5 based on 14 reviews, the plugin enjoys strong positive feedback, though a small minority of users report difficulties.

Positive highlights

'Great plugn, simple and easy configuration' - Sudharshan WP
'Open Source and easy' - dbrooke1007
'Worked right out of the box with EmpowerID' - rahyong
'Works very well with Azure AD, nice and simple but enough functionality' - Hal Sclater
'Great SAML plugin' - sandykadam

Common complaints

Weaknesses

Some users find configuration challenging, especially with Active Directory integration
Lack of advanced features may require custom development
Security vulnerabilities have been reported in past versions, necessitating careful updates

Who Should Use This?

Best for

Users and organizations seeking a free, open-source SAML SSO plugin with essential features and straightforward setup, especially those comfortable with basic SAML configuration.

Not ideal for

Users requiring advanced SAML features, premium support, or those who are inexperienced with SAML and Active Directory configurations may find this plugin less suitable. Also, those concerned about past security vulnerabilities should ensure timely updates.

Pricing & Value

Free version includes

The free version includes core SAML SSO functionality sufficient for most standard use cases, with basic configuration options and compatibility with common Identity Providers.

Final Verdict

OneLogin SAML SSO offers a reliable and straightforward solution for implementing SAML Single Sign-On in WordPress, with strong positive user feedback highlighting its ease of use and compatibility with various Identity Providers. Its open-source nature allows for customization, though some users may face challenges during configuration.

However, the plugin's history of critical security vulnerabilities and absence of a premium support option means users must be vigilant about updates and may need additional expertise for complex setups. Alternatives exist for those seeking more advanced features or dedicated support, but OneLogin SAML SSO remains a solid free choice for many.