Authentication 2023

SimpleSAMLphp WordpressAuth Module

SAML 2.0 Identity Provider Module for WordPress User Database Integration

Duration

3 Weeks

Year

2023

Technologies

SimpleSAMLphp 2.1 WordPress 6.3+ SAML 2.0 PHP 8 MySQL/MariaDB Composer

The Challenge

Many organizations use WordPress as central user management but need SAML 2.0-based Single Sign-On (SSO) functionality for other applications. The challenge was to develop a seamless authentication module that makes WordPress user data available as a SAML Identity Provider without affecting the existing WordPress installation.

The Solution

The solution was a SimpleSAMLphp authentication module that directly accesses the WordPress database and enables user authentication via SAML 2.0. The module extends SimpleSAMLphp with WordPress-specific functionalities and supports various WordPress user roles and metadata. Implementation was done as a standalone module without dependencies on the WordPress installation.

Implementation

Implementation was done as a Composer-based SimpleSAMLphp module with direct MySQL/MariaDB integration. The module supports WordPress password hashing, user role mapping, and custom fields integration. Comprehensive documentation and testing ensure easy installation and configuration. The module is fully compatible with current SimpleSAMLphp and WordPress versions.

Results

A production-ready authentication module successfully deployed in various enterprise environments. The module enables seamless SSO integration between WordPress and SAML-capable applications. The backward-compatible implementation supports various WordPress and SimpleSAMLphp versions and provides robust user authentication without performance impact.

Key Features

SAML 2.0 Support

Full SAML 2.0 Identity Provider functionality

WordPress Integration

Direct database access without WordPress dependencies

Role Mapping

Advanced user role and custom field mapping

Gallery