EZPZ SAML SP Single Sign On (SSO)

EZPZ SAML SP turns your wordpress website into a fully functioning SAML
service provider. EZPZ SP then allows you to use your existing Identity
Provider (IdP) to authenticate to your wordpress website. We support all
known SAML 2.0 IdPs such as: ADFS, Athens (Eduserv), AzureAD, Bitium,
Centrify, Google Apps, Okta, OneLogin, OpenAM, Oracle, Ping Identity,
Salesforce, Shibboleth, SimpleSAMLphp, WSO2 and many more.

In the premium version of the plugin you are also able to use IP Based
authentication. The premium version also allows you to configure
authentication to multiple IdPs instead of a single IdP.

You have the power to either switch on authentication for the entire
wordpress website to force Single Sign on site wide. Or you can choose to
enable per post / page authentication and require login for particular
posts and pages.

If you require any Single Sign On help or have any questions about the
plugin please email [email protected]

Free Features

1. SAML Authentication
2. Automatic IDP metadata pull (not cached, pulled on every login)
3. Upload IDP metadata file
4. Protect whole site
5. Restrict access to posts or pages
6. Redirect wordpress login page to IDP
7. Direct IDP login link that can be used anywhere (not currently shown in
   front-end)
8. Login via institution link on footer of wordpress login page
9. Auto fill username and optionally email from SAML attributes
10. SAML Single Logout
11. Automatic initial certificate generation
12. Custom SP certificate support
13. Auto creates missing users on login
14. Advanced security options

Premium Features

1. Option to disable user auto creation
2. Option to append institution name to user to avoid duplicates across IDPs
3. Options to select SAML Request binding type
4. Customized Role Mapping / Set users default role on creation
5. IDP Metadata caching
6. Custom Attribute Mapping (Any attribute which is stored in user-meta
   table)
7. Sub-site specific SSO for Multisite
8. Bulk update to enable/disable post and page restrictions
9. Granular access controls per institution
10. Auto login via IP
11. Ability to restrict posts or pages to specific institutions and/or
    specific groups?
12. File upload protection (new file manager so you can protect PDFs, images
    etc)