2.4.3 Wordpress plugin using the Onelogin PHP Toolkit

This release:

• Update php-saml library to 2.10.0 (it includes SAML Signature Wrapping attack prevention and other security improvements).
• Fix Idp initiated sign out issue (WP session not closed) #25
• Fix Ordering issue with Auth Check for SAML Validation #23
• Be able to enable lowercase URL encoding (Compatibility issue with ADFS when validating Signatures

2.4.2 Wordpress plugin using the Onelogin PHP Toolkit

This release:

• Updates php-saml library to 2.9.0 (it includes SAML Signature Wrapping attack prevention).
• Updates Onelogin Icon/Image

2.4.1 Wordpress plugin using the Onelogin PHP Toolkit

In this release:

• Update php-saml library to 2.8.0

2.4.0 Wordpress plugin using the Onelogin PHP Toolkit

In this release:

• Use the worpress roles API to generate the options for the mappings a nd use these mappings to set the user role. Add Role precedence support.
• Add alternative ACS URL (WPEngine compatible)
• Update php-saml library to 2.7.0

2.3.1 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Fix SAML link

2.3.0 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Uncomment out filter based custom role code
• Add 'Keep Local login' functionality in order to prompt the normal login form + a SAML link instead of directly execute the SP-initiaited SSO flow
• Fix changelog
• Update php-saml library to 2.6.1

2.2.0 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Password security issue
• Add alternative solution/documentation about custom roles (php/functions.php L167)
• Call exit after any error message or redirection

2.1.8 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Assign the wordpress default role if no role was provided by the IdP
• Prevent to change the role to the superuser (user_id = 1)

2.1.7 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Add NameIDFormat support.
• Add requestedAuthnContext support.
• SessionIndex and nameID is now passed to the IdP
• Now retrieveParametersFromServer can be activated
• Improve the role/group support when multiple values on a single attribute statement.

2.1.6 Wordpress plugin using the Onelogin PHP Toolkit [Files depends of Wordpress]

In this release:

• Update php-saml library to 2.5.0
• Replace deprecated method wp_login by wp_signon
• SLS inprovement