Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
OneLogin SAML SSO
This plugin provides single sign-on via SAML and gives users one-click access to their WordPress accounts from identity providers like OneLogin.
The facts
- Rating
- 4.4★ from 14
- Active installs
- 7k+
- Price
- Free
- Last updated
- 1 Jul 2026
- Added
- Jan 2011
- Requires WP
- 2.1.2
- Tested up to
- WP 5.9.16
- Downloads
- 211,169
Our analysis
AI-assistedOneLogin SAML SSO is a WordPress plugin designed to eliminate the need for passwords by allowing users to authenticate through their Active Directory or LDAP credentials. It enhances security by supporting two-factor authentication methods, such as YubiKeys and VeriSign VIP Access. This plugin is particularly useful for organisations looking to streamline user access and improve security measures for their WordPress sites.
The plugin integrates with existing Active Directory or LDAP servers, enabling users, typically editors, to sign in easily from their intranet. It also offers the ability to restrict access for former employees and contractors, ensuring that only current users can log in.
Best for: This plugin suits organisations that use Active Directory or LDAP for user management and want to enhance security in their WordPress site.
What it does well
- ✓Eliminates passwords for WordPress users
- ✓Supports authentication via Active Directory or LDAP
- ✓Enhances security with two-factor authentication options
- ✓Prevents access from former employees and contractors
- ✓Free to use from the WordPress.org directory
Where it falls short
- •Limited information on additional features or support
- •No details on compatibility with specific server configurations
Verdict
OneLogin SAML SSO provides a straightforward solution for password elimination and user authentication, making it suitable for businesses focused on security and ease of access.
From the developer
sixtomartin's own description of OneLogin SAML SSO, lightly tidied.
This SAML plugin eliminates passwords and allows you to authenticate WordPress users (typically editors) against your existing Active Directory or LDAP server as well increase security using YubiKeys or VeriSign VIP Access via OneLogin. OneLogin is pre-integrated with thousands of apps and handles all of your SSO needs in the cloud and behind the firewall.
- Eliminate passwords in WordPress
- Allow users to sign into WordPress with their Active Directory or LDAP credentials
- Give users one-click access from your intranet
- Increase security using browser PKI certificates or two-factor authentication from Yubico or VeriSign
- Easily prevent access from former employees and contractors
If you used this plugin before 2.2.0 with just-in-time provision active, Read: https://wpvulndb.com/vulnerabilities/8508
To mitigate that bug, place the script at the root of wordpress and execute it (later remove it) https://gist.github.com/pitbulk/a8223c90a3534e9a7d5e0a93009a094f
Tagged as
industry
Dating & Matchmaking
purpose
Security & Malware Protection
feature
Social Login
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)