OneLogin SAML SSO

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 50% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ Sudharshan WP

   2mo ago

   I have been using it for many websites, and working great. Kindly upgrade the plugin and it’s dependent libraries to make it compatible with latest versions.

   Read on wp.org ↗
2. ★★★★★ sandykadam

   6.8y ago

   Great SAML plugin

   Read on wp.org ↗
3. ★★★★★ Hal Sclater

   7.2y ago

   Works very well with Azure AD, nice and simple but enough functionality. Only tricky part was the attribute mapping: These can be found in Azure AD, click the edit button on User Attributes & mapping, then copy and paste the full claim names in the first column. This topic was modified 7 years, 1 month ago by Jan Dembowski. Reason: Removed link

   Read on wp.org ↗
4. ★★★★★ josem_ramirez

   7.6y ago

   Works perfectly with SAML

   Read on wp.org ↗
5. ★★★★★ aaljaseem

   7.7y ago

   Hello I am a student i have Active Directory with federation services. i want to login to wordpress with credentails of the active directory. i dont know if the config wrong or i dont know how to login after configuring this plugin with AD credentials. i have tried this plugin and many others from miniOrange. Nothing works with me Please help

   Read on wp.org ↗
6. ★★★★★ rahyong

   7.9y ago

   Worked right out of the box with EmpowerID as IdP with all of the required features.

   Read on wp.org ↗
7. ★★★★★ dbrooke1007

   8.2y ago

   Working on github with the admin was a pleasure. This plugin may not have everything, but it has the basics. What it didn’t have I built myself (Remember Me feature), and the admin was happy to incorporate.

   Read on wp.org ↗
8. ★★★★★ chustedde

   8.5y ago

   I wish I came across this SAML plugin first! Very easy to install and configure and does everything we need it to, even though we aren’t using OneLogin but our own IdP instead.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.6.0 Update php-saml to 4.3.1 (PHP8 compatibility) 3.6.0
2. — Version 3.5.0 Security: Update xmlseclibs to 3.1.4 due CVE-2025-66475 Update php-saml to 3.8.1 3.5.0
3. — Version 3.4.0 Update php-saml to 3.6.1 and xmlseclibs to 3.1.1 Support Passive mode and don’t raise error when passive authentication failed Allow set desired target on saml_sso endpoint by the use of a ‘target’ GET parameter Add new 3.4.0
4. — Version 3.3.1 wp_login was triggered with wrong arguments, user object was not initializated Minor refactor 3.3.1
5. — Version 3.3.0 Add support for Nickname user field Fix redirect protection. Absolute URLs failed and only relatives were accepted Add support for saml_nameid_name_qualifier and saml_nameid_name_sp_qualifier which fixes detected issues 3.3.0
6. — Version 3.2.1 Sanitize inputs Update php-saml to 3.4.1 Fix nameidformat field 3.2.1

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.7 OneLogin SAML SSO <= 3.1.2 - Open Redirection ↗
   2021-03-31 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 3.1.2 Patched in 3.2.0
2. High · 7.5 OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service ↗
   2019-01-28 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Affects <= 2.8.0 Patched in 3.0.0
3. High · 7.3 OneLogin SAML SSO <= 2.4.2 - Use of Vulnerable Component ↗
   2016-10-14 Improper Verification of Cryptographic Signature Affects <= 2.4.2 Patched in 2.4.3
4. Critical · 9.8 OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass ↗
   2016-06-06 Improper Authentication Affects < 2.1.6 Patched in 2.1.6
5. High · 7.5 OneLogin SAML SSO < 2.2.0 - Authentication Bypass ↗
   2016-01-21 CVE-2016-10928 Use of Hard-coded Credentials Affects < 2.2.0 Patched in 2.2.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-11-25 8K+ → 7K+ down after 2 days in tier
2. 2025-11-23 7K+ → 8K+ up after 1 days in tier
3. 2025-11-22 8K+ → 7K+ down after 1 days in tier
4. 2025-11-21 7K+ → 8K+ up after 2 days in tier
5. 2025-11-19 8K+ → 7K+ down after 1 days in tier
6. 2025-11-18 7K+ → 8K+ up after 3 days in tier
7. 2025-11-15 8K+ → 7K+ down after 190 days in tier
8. 2025-05-09 7K+ → 8K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• SAML Single Sign On – SSO Login 10K+ installs · 4.9★ · 3 shared tags A
• SSO Login – Universal (OAuth + SAML) 10+ installs · 3.6★ · 3 shared tags B
• Open Access SSO 10+ installs · 3.6★ · 3 shared tags B
• onID SSO by SAML 2.0 — installs · 3.6★ · 3 shared tags C
• Frontegg SAML SSO — installs · 4.0★ · 3 shared tags C
• OAuth Single Sign On – SSO (OAuth Client) 6K+ installs · 4.9★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for OneLogin SAML SSO into a readme, a review or a deck. It updates itself.

OneLogin SAML SSO: 7K+ active installs, 4.4★ (14 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/onelogin-saml-sso