Title: OneLogin SAML SSO Author: sixtomartin Published: 2011년 1월 10일 Last modified: 2026년 7월 1일 --- 플러그인 검색 이 플러그인은 **최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다**. 워드프레스의 좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 있을 수 있습니다. ![](https://s.w.org/plugins/geopattern-icon/onelogin-saml-sso.svg) # OneLogin SAML SSO 작성자: [sixtomartin](https://profiles.wordpress.org/sixtomartin/) [다운로드](https://downloads.wordpress.org/plugin/onelogin-saml-sso.zip) * [세부사항](https://ko.wordpress.org/plugins/onelogin-saml-sso/#description) * [평가](https://ko.wordpress.org/plugins/onelogin-saml-sso/#reviews) * [개발](https://ko.wordpress.org/plugins/onelogin-saml-sso/#developers) [지원](https://wordpress.org/support/plugin/onelogin-saml-sso/) ## 설명 This SAML plugin eliminates passwords and allows you to authenticate WordPress users( typically editors) against your existing Active Directory or LDAP server as well increase security using YubiKeys or VeriSign VIP Access via OneLogin. OneLogin is pre-integrated with thousands of apps and handles all of your SSO needs in the cloud and behind the firewall. * Eliminate passwords in WordPress * Allow users to sign into WordPress with their _Active Directory_ or _LDAP_ credentials * Give users one-click access from your intranet * Increase security using browser PKI certificates or two-factor authentication from _Yubico_ or _VeriSign_ * Easily prevent access from former employees and contractors If you used this plugin before 2.2.0 with just-in-time provision active, Read: https:// wpvulndb.com/vulnerabilities/8508 To mitigate that bug, place the script at the root of wordpress and execute it (later remove it) https://gist.github.com/pitbulk/ a8223c90a3534e9a7d5e0a93009a094f ## 후기 ![](https://secure.gravatar.com/avatar/c069ff83eee33e70baaa7816e28112ddb30b68bb149cc77503e9970a55079200? s=60&d=retro&r=g) ### 󠀁[Great plugn, simple and easy configuration](https://wordpress.org/support/topic/great-plugn-simple-and-easy-configuration/)󠁿 [Sudharshan WP](https://profiles.wordpress.org/reddyweb/) 2026년 7월 7일 I have been using it for many websites, and working great. Kindly upgrade the plugin and it's dependent libraries to make it compatible with latest versions. ![](https://secure.gravatar.com/avatar/f07d1143daf535ac4ba5321c79f9cbbd712a0031c865755133be01cc75a2ee71? s=60&d=retro&r=g) ### 󠀁[Great SAML plugin](https://wordpress.org/support/topic/great-saml-plugin/)󠁿 [sandykadam](https://profiles.wordpress.org/sandykadam/) 2019년 11월 14일 Great SAML plugin ![](https://secure.gravatar.com/avatar/99b15c6a2a1a1611339e0ffe63fbaac78ffc058d744e2790f3f8a54b184f66b6? s=60&d=retro&r=g) ### 󠀁[Excellent, working with Azure AD](https://wordpress.org/support/topic/excellent-working-with-azure-ad/)󠁿 [Hal Sclater](https://profiles.wordpress.org/hsclater/) 2019년 6월 7일 답글 1개 Works very well with Azure AD, nice and simple but enough functionality. Only tricky part was the attribute mapping: These can be found in Azure AD, click the edit button on User Attributes & mapping, then copy and paste the full claim names in the first column. ![](https://secure.gravatar.com/avatar/d0cffb9e98964751695b917d66d8be538b0929285385e0c9a7f0e63943533f82? s=60&d=retro&r=g) ### 󠀁[Great Plugin!](https://wordpress.org/support/topic/great-plugin-20772/)󠁿 [josem_ramirez](https://profiles.wordpress.org/josem_ramirez/) 2019년 2월 7일 Works perfectly with SAML ![](https://secure.gravatar.com/avatar/d52fb84180237dec94e01bbde6a441e16ac89c7fc0fe3404732cbc2f8343a9b8? s=60&d=retro&r=g) ### 󠀁[Doesn’t work. Difficult to me](https://wordpress.org/support/topic/doesnt-work-difficult-to-me/)󠁿 [aaljaseem](https://profiles.wordpress.org/aaljaseem/) 2019년 1월 4일 Hello I am a student i have Active Directory with federation services. i want to login to wordpress with credentails of the active directory. i dont know if the config wrong or i dont know how to login after configuring this plugin with AD credentials. i have tried this plugin and many others from miniOrange. Nothing works with me Please help ![](https://secure.gravatar.com/avatar/047b0a43fc57a2db12e7d2461194f3f6034a457f72852549595381c45083353f? s=60&d=retro&r=g) ### 󠀁[Worked OOTB with EmpowerID](https://wordpress.org/support/topic/worked-ootb-with-empowerid/)󠁿 [rahyong](https://profiles.wordpress.org/rahyong/) 2018년 9월 28일 Worked right out of the box with EmpowerID as IdP with all of the required features. [ 모든 14 평가 읽기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/) ## 기여자 & 개발자 “OneLogin SAML SSO”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ sixtomartin ](https://profiles.wordpress.org/sixtomartin/) * [ onelogin ](https://profiles.wordpress.org/onelogin/) [자국어로 “OneLogin SAML SSO”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/onelogin-saml-sso) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/onelogin-saml-sso/)는, [SVN 저장소](https://plugins.svn.wordpress.org/onelogin-saml-sso/)를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/onelogin-saml-sso/)을 [RSS](https://plugins.trac.wordpress.org/log/onelogin-saml-sso/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 #### 3.6.0 * Update php-saml to 4.3.1 (PHP8 compatibility) #### 3.5.0 * Security: Update xmlseclibs to 3.1.4 due CVE-2025-66475 * Update php-saml to 3.8.1 #### 3.4.0 * Update php-saml to 3.6.1 and xmlseclibs to 3.1.1 * Support Passive mode and don’t raise error when passive authentication failed * Allow set desired target on saml_sso endpoint by the use of a ‘target’ GET parameter * Add new parameter to determine if the account was created or already existed * Add Support for WPS Hide Login * Use add_query_arg to better adjust login URLs * Login always returned to frontend page, now if redirect_to is set, redirects there #### 3.3.1 * wp_login was triggered with wrong arguments, user object was not initializated * Minor refactor #### 3.3.0 * Add support for Nickname user field * Fix redirect protection. Absolute URLs failed and only relatives were accepted * Add support for saml_nameid_name_qualifier and saml_nameid_name_sp_qualifier which fixes detected issues on SLO process with ADFS * Add to setcookie method the cookie domain, secure flag and httponly * [#101](https://github.com/onelogin/wordpress-saml/issues/101) SAML request was improperly generated when requestedAuthNContext was empty. * Replace deprecated method (sanitize_url –> esc_url_raw ) * Support triggering wp_login hook controller by a setting * Update php-saml to 3.5.0 #### 3.2.1 * Sanitize inputs * Update php-saml to 3.4.1 * Fix nameidformat field #### 3.2.0 * Avoid untrusted redirections * Disable SAML on CLI/Cron on ACS and SLS endpoints. Allow custom filter to disable SAML * Support multi-role * Fix variable assignment during conditional check * Swap to `manage_options` for the cap check on the validate page. * Fix unintentional variable assignment * Set 1000 as the limit of sites to be managed by SAML network settings #### 3.1.2 * Minor fix to extract all sites for the multi-site features #### 3.1.1 * Multisites: Add the option to automatically enroll users on sites when a SAML Network setting enabled * Fix #86. Set default role when not provided only on create action * Detect Ajax and cron tasks #### 3.1.0 * Multisite improvement. Now when multisite is enabled, on the “Network Admin” dashboard appears a “Network SAML Settings” where you can define a SAML template setting, and then inject it in sites. Also will allow you enable/disable multiple sites on a unique view. * Now the onelogin_saml_keep_local_login will also hide the login form on wp-login. php view. So when on a logout action, we can notify the user with the typical message of ‘You are now logged out.’ without showing the local login form. * Update php-saml to 3.3.1 * Update xmlseclibs to 3.0.4 #### 3.0.0 * Update php-saml to 3.1.0 to make the plugin compatible with PHP7.3 * Overriding user_register will prevent admins to register users, so deactivating that override * Stop using $blog_id at the is_user_member_of_blog call #### 2.8.0 * Update php-saml to 2.14.0 * Remove the use of screen_icon method #### 2.7.1 * Fix is_saml_enabled method #### 2.7.0 * Make NameID optional #### 2.6.0 * Update php-saml to 2.13.0 * Add Status setting in order to enable or disable the plugin (Required on multi- sites environment since the plugin is enabled globally for the network) * Add ‘Remember Me’ Login option to Settings * Fix bug on escaping value for customize_links_saml_login * If password is disabled.. turn field readonly.. not disable it * Add ability to expose attributes that come from saml via a WordPress * On multi-site environment, provision users on specific site if JIT enabled on that site. #### 2.5.0 * Update php-saml library to 2.11.0 * Allow WP-CLI to work * Sanitize SAML settings input * Add support to SAML NameId Format #### 2.4.7 * Fix Signature & Digest algorithm support #### 2.4.6 * Fix validate page (debug/strict values were showed wrong) * Avoid error 500 when accesing ACS URL directly, instead print error. #### 2.4.5 * Update php-saml library to 2.10.5 * Fixes some grammatical error * Use WP to determine wp-content path * Avoid double site URL concatenation * Replace deprecated add_contextual_help method * Signature & Digest algorithm support * On SP metadata publication validate only SP part. #### 2.4.4 * Relax Destination check. * On SLS, Print errors, not lastError (it will be printed if debug enabled) #### 2.4.3 * Update php-saml library to [2.10.0](https://github.com/onelogin/php-saml/releases/tag/v2.10.0)( it includes SAML Signature Wrapping attack prevention and other security improvements). - Fix Idp initiated sign out issue (WP session not closed) [#25](https://github.com/onelogin/wordpress-saml/issues/25) - Fix Ordering issue with Auth Check for SAML Validation [#23](https://github.com/onelogin/wordpress-saml/issues/23) - Be able to enable lowercase URL encoding (Compatibility issue with ADFS when validating Signatures #### 2.4.2 * Update php-saml library to 2.9.0 (it includes SAML Signature Wrapping attack prevention). #### 2.4.1 * Update php-saml library to 2.8.0 #### 2.4.0 * Use the worpress roles API to generate the options for the mappings a nd use these mappings to set the user role. Add Role precedence support. * Add alternative ACS URL (WPEngine compatible) * Update php-saml library to 2.7.0 #### 2.3.1 * Fix SAML link #### 2.3.0 * Uncomment out filter based custom role code * Add ‘Keep Local login’ functionality in order to prompt the normal login form + a SAML link instead of directly execute the SP-initiaited SSO flow * Fix changelog * Update php-saml library to 2.6.1 #### 2.2.0 * Password security issue * Add alternative solution/documentation about custom roles (php/functions.php L167) * Call exit after any error message or redirection #### 2.1.8 * Improve the role/group support when multiple values on a single attribute statement. * Prevent to auto-update the role of the superuser #### 2.1.7 * Add NameIDFormat support. * Add requestedAuthnContext support. * SessionIndex and nameID is now passed to the IdP * Now retrieveParametersFromServer can be activated #### 2.1.6 * Update php-saml library to 2.5.0 * Remove deprecated method wp_login * SLS inprovement #### 2.1.5 * Refactor sso/slo flow #### 2.1.4 * Added stay when slo and forced logn #### 2.1.3 * Updated the php-saml toolkit (now 2.2.0) * Added more Customization related to change password, reset password, change mail #### 2.1.2 * Fix minor bugs. Add customRole support (editing php/functions.php file, review commented code) #### 2.1.1 * Fix bug introduced in the reimplementation #### 2.1.0 * Reimplement the plugin architecture (was an independent plugin, now depends on wordpress). * Update the php-saml toolkit * Improve the i18n support * Improve base url and pase path * Override user registration or reset password links to link 3rd party (like IdP) urls. * Fix bug when role attribute carry a space as attribute #### 2.0.0 * Based on the new php toolkit, added many functionalities: JIT, SLO. #### 1.0.1 * Fixed installation issue. #### 1.0.0 * First version. ## 기초 * 버전 **3.6.0** * 최근 업데이트: **3개월 전** * 활성화된 설치 **7,000+** * 워드프레스 버전 ** 2.1.2 또는 그 이상 ** * 다음까지 시험됨: **5.9.19** * 언어 * [English (US)](https://wordpress.org/plugins/onelogin-saml-sso/) * 태그: * [active directory](https://ko.wordpress.org/plugins/tags/active-directory/)[password](https://ko.wordpress.org/plugins/tags/password/) [SAML](https://ko.wordpress.org/plugins/tags/saml/)[Single Sign-on](https://ko.wordpress.org/plugins/tags/single-sign-on/) [sso](https://ko.wordpress.org/plugins/tags/sso/) * [고급 보기](https://ko.wordpress.org/plugins/onelogin-saml-sso/advanced/) ## 평점 별 5점 만점에 4.4점. * [ 12/5-별점 후기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/?filter=5) * [ 0/4-별점 후기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/?filter=4) * [ 0/3-별점 후기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/?filter=3) * [ 0/2-별점 후기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/?filter=2) * [ 2/1-별점 후기 ](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/onelogin-saml-sso/reviews/) ## 기여자 * [ sixtomartin ](https://profiles.wordpress.org/sixtomartin/) * [ onelogin ](https://profiles.wordpress.org/onelogin/) ## 지원 지난 2개월 동안 해결된 문제: 1 중 0 [지원 포럼 보기](https://wordpress.org/support/plugin/onelogin-saml-sso/)