Source evidence

SAML vs OIDC

OpenID Connect Generic Client · support · 2022-07-25T17:16:00+00:00

OpenID Connect Generic Client plugin evidence original source source API

mixedsentiment

highseverity

0.82relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

tomaspalic resolved

Hello, our client wanted us to use OpenID Connect plugin on their WP website and they have asked us to provide the following information. Can someone please explain what there are and where can we find the information they’ve requested? Thank you. Clients requests: —————– 1) Which of the following are you using? – SAML(Allows the user to select a SAML (Security Assertion Markup Language) connection.) – OIDC(Allows the user to select an OIDC (OpenID Connect) connection.) 2) Can you provide the values for either the Entity or Client ID? – Entity ID – (SAML) A unique identifier the business application will send when users are directed to MyID for authentication. – Client ID – (OIDC) A unique identifier the business application will send when users are directed to MyID for authentication. 3) Can you provide this URL? – Assertion Consumer Service URL – (SAML) Application URL expecting the MyID payload.` This plugin doesn’t provide SAML authentication only OpenID Connect. This plugin will require a Client ID that would be provided by your Identity Provider the plugin doesn’t provide this value. Thank you so much! Let us know if you move forward with using the plugin and which identity provider you are using and we can assist with any configuration questions you may have.

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: SAML vs OIDC: users show security, setup pain that may indicate a product gap.

Evidence quote: SAML vs OIDC Hello, our client wanted us to use OpenID Connect plugin on their WP website and they have asked us to provide the following information.

Affected feature: form

security setup value form

Plugin

API

OpenID Connect Generic Client

10.0K active installs · 200.2K downloads · rating 100.0

apps login oauth2 openidconnect security

Comments

3 shown

Tim Nolte 2022-07-25T17:41:00+00:00

This plugin doesn’t provide SAML authentication only OpenID Connect. This plugin will require a Client ID that would be provided by your Identity Provider the plugin doesn’t provide this value.

tomaspalic 2022-07-25T20:07:00+00:00

Thank you so much!

Tim Nolte 2022-07-25T23:15:00+00:00

Let us know if you move forward with using the plugin and which identity provider you are using and we can assist with any configuration questions you may have.