WP SAML Auth

78 Quality Score

Active Installs

17/30

The popularity score is boosted well above its install base of 8,000 because the scoring weights niche relevance highly, but raw adoption remains modest compared to mainstream auth plugins.

Update Freshness

25/25

Maintenance is perfect: the plugin was updated on 2026-05-19 and is tested against WordPress 6.9.4, indicating an actively maintained codebase.

User Rating

14/15

The rating of 90 out of 100 from 8 reviewers is solid, though the small sample size limits how confidently it reflects broader user sentiment.

Support Health

8/15

Support health is weak at 50 out of 100, with only 3 threads on record and just 1 resolved, meaning community help is thin if you run into edge cases.

WP Compatibility

15/15

Compatibility is excellent, requiring PHP 7.4 and WordPress 6.4 or higher, which aligns with current supported versions and minimizes upgrade risk.

Scores higher than 66% of indexed plugins

About

SAML authentication for WordPress.

Active Installs 7k+

Rating ★★★★½ 4.5/5

Last Updated 2026-08-12 7:59pm GMT

Requires WordPress 6.4+

Tested Up To 7.0.4

Requires PHP 7.4+

✓ No known vulnerabilities

What It Does

WP SAML Auth enables WordPress to accept logins through a SAML 2.0 identity provider, letting users sign in with corporate or institutional SSO credentials instead of a local WordPress password. It bridges WordPress with existing identity systems such as Okta, Azure AD, OneLogin, or Shibboleth so that user provisioning and authentication are handled centrally. Role mapping and attribute-based permissions are configurable through the plugin's settings.

Who It's For

This plugin is built for organizations that already run an enterprise identity provider and need WordPress to sit inside that same login ecosystem, such as universities, healthcare networks, government agencies, and corporate intranets. It suits administrators comfortable editing PHP configuration files or constants, since several settings are exposed through wp-config rather than the admin UI. Sites with fewer than a handful of SSO users will find the setup overhead disproportionate.

Who Should Skip It

If you only need two-factor protection on standard WordPress logins, or your team is small with no central IdP, this plugin adds complexity without real benefit. Blog owners, small business sites, and anyone relying on social login or basic password authentication should look at lighter plugins like Two Factor or Google Authenticator instead.

The Bottom Line

WP SAML Auth delivers a focused, well-maintained SAML 2.0 integration that earns its 78.48 overall score through strong compatibility and a clean code trail. Its limited install base and thin support footprint mean you should be comfortable troubleshooting IdP integration with limited community backup. For organizations that need WordPress to honour an existing SSO, it is a sensible choice; for everyone else, a simpler auth plugin will do the job with less friction.

Related Plugins

Two Factor 84/100

Pick this if you only need a second login factor on standard WordPress accounts and do not run a SAML identity provider.

WP-Members Membership Plugin 82/100

Choose this when your goal is gating site content behind registrations rather than federating with an external IdP.

SAML Single Sign On – SSO Login 80/100

Pick this if you want a more GUI-driven SAML setup with premium support tiers, though it has a similar install count and slightly lower quality score.

Google Authenticator 80/100

Choose this for a lightweight TOTP second factor when SAML is overkill for your use case.

WP Limit Login Attempts 79/100

Pick this for brute-force protection on standard WordPress logins rather than enterprise SSO.