WPIntell

Market

saml

Saml matters only if the evidence supports a paid workflow around keeping user access, permissions, and protected content correct, not a list of isolated fixes. The current commercial thesis is: Access mistakes expose private content, block paying users, and create support-heavy account problems. The entry wedge is to audit roles, permissions, protected pages, and login handoffs before access issues reach customers.

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

61 / 83 rows with source links

73.5% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

22 rows with no attached evidence

0 rows have source counts but still need direct links.

Opportunity Summary

Full report

Build an access control and account operations plugin for membership site owners, agencies, and operations teams: Access mistakes expose private content, block paying users, and create support-heavy account problems. The first wedge is to audit roles, permissions, protected pages, and login handoffs before access issues reach customers.

The unmet need is not the individual complaint. It is the recurring business workflow: Access mistakes expose private content, block paying users, and create support-heavy account problems. Current stage: commercial watchlist.

Competitors

4 shown
WP SAML Auth 8.0K installs · 4.5
praise owner
-100.0%momentum 54.5weakness 22/9pain/praise

Pain still appears around bugs, compatibility despite praise for reliable, quality.

source 1 source 2
OneLogin SAML SSO 7.0K installs · 4.4
praise owner
-100.0%momentum 49.3weakness 25/11pain/praise

Pain still appears around bugs, support despite praise for quality, reliable.

source 1 source 2
Shibboleth 3.0K installs · 4.3
praise owner
-100.0%momentum 22.8weakness 1/8pain/praise

Pain still appears around security, missing feature despite praise for reliable, easy.

source 1 source 2

Evidence

Open evidence explorer
complaint Path to certificate

Path to certificate: users show security, bugs, compatibility pain that may indicate a product gap.

WP SAML Auth · However we keep getting errors on the wp-login page that indicate ‘idp_cert_or_fingerprint_not_found_and_required’. complaint Highly disappointed

Highly disappointed: users show security, bugs, support pain that may indicate a product gap.

Cloud SAML SSO – Single Sign On Login · COMPLETLY UNRELIABLE This plugin is highly insecure and overly complicated. complaint Uncaught Exception: Detected use of DOCTYPE/ENTITY in XML, disabled to prevent

Uncaught Exception: Detected use of DOCTYPE/ENTITY in XML, disabled to prevent: users show bugs, compatibility, support pain that may indicate a product gap.

WP SAML Auth · Uncaught Exception: Detected use of DOCTYPE/ENTITY in XML, disabled to prevent Hi, We are using the WP SAML AUTH plugin to login to the application. complaint Weak Security Model, No Developer Response

Weak Security Model, No Developer Response: users show security, missing feature, support pain that may indicate a product gap.

Shibboleth · Weak Security Model, No Developer Response As first mentioned in this support thread post: https://wordpress.org/support/topic/shibboleth-options-on-multisite-wordpress-installation?replies=6 this Shibboleth plugin provides inadequate security by allowing any administrator of a multisite installation to alter global settings for the site. complaint Login does not redirect to internal page

Login does not redirect to internal page: users show security, missing feature, support pain that may indicate a product gap.

OneLogin SAML SSO · When I enable the setting in your plugin that requires users to log in so that they can visit the site, upon logging in they are redirected back to the home page instead of the page they were trying to visit. complaint Plugin started breaking login page

Plugin started breaking login page: users show bugs, compatibility, setup pain that may indicate a product gap.

OneLogin SAML SSO · Plugin started breaking login page Fatal error: Uncaught Error: Call to undefined function is_plugin_active() in home/dummy-url/wp-content/plugins/onelogin-saml-sso/php/functions.php:108 Stack trace: #0 home/dummy-url/wp-includes/class-wp-hook.php(307): saml_custom_login_footer(”) #1 home/dummy-url/wp-includes/plugin.php(189): WP_Hook->apply_filters(”, Array mixed Check for existing accounts and honor the user role

Check for existing accounts and honor the user role: users show security, bugs, missing feature pain that may indicate a product gap.

Cloud SAML SSO – Single Sign On Login · We will have hundreds of daily users on this installation. mixed ACS Url seems to be broken on multisite installations using sub-folder structure

ACS Url seems to be broken on multisite installations using sub-folder structure: users show bugs, compatibility, missing feature pain that may indicate a product gap.

SAML Single Sign On – SSO Login · ACS Url seems to be broken on multisite installations using sub-folder structure Hi! mixed Switch from Apache to NGINX environment

Switch from Apache to NGINX environment: users show security, bugs, compatibility pain that may indicate a product gap.

WP SAML Auth · Switch from Apache to NGINX environment I’ve used this plugin to successfully configure a connection between a private portal and an SSO service provided by a third party subject. mixed WPO005 after update

WPO005 after update: users show security, bugs, missing feature pain that may indicate a product gap.

SAML Single Sign On – SSO Login · WPO005 after update after updating the plugin just now i can;t log in to the site anymore getting the error “WPO005: Invalid Login attempt. mixed Content Security Policy and the plugin scripts

Content Security Policy and the plugin scripts: users show security, bugs, compatibility pain that may indicate a product gap.

SAML Single Sign On – SSO Login · Content Security Policy and the plugin scripts Hi. mixed Possible bug with user creation (might be in core, not sure)

Possible bug with user creation (might be in core, not sure): users show security, bugs, performance pain that may indicate a product gap.

Shibboleth · Possible bug with user creation (might be in core, not sure) We have at least one user with an apostrophe in their SSO username (let’s say their username is “jane_o’toole”). mixed Log Out from IDP not closing WordPress Session

Log Out from IDP not closing WordPress Session: users show security, bugs, missing feature pain that may indicate a product gap.

Shibboleth · Everthing works fine, except when logging out from the IDP Website the WP session is still active and the user is still logged in. mixed Version 2.1.2 – Missing vendor folder

Version 2.1.2 – Missing vendor folder: users show bugs, missing feature, support pain that may indicate a product gap.

WP SAML Auth · Version 2.1.2 – Missing vendor folder In Version 2.1.2, it appears that the vendor folder was not included, causing issues so that no login is possible. complaint Not tested with this version of WordPress (6.1.1)

Not tested with this version of WordPress (6.1.1): users show security, compatibility, support pain that may indicate a product gap.

OneLogin SAML SSO · Not tested with this version of WordPress (6.1.1) Hi, this is a critical security plugin that should afford a greater level of protection for my websites, however the plugin itself is only confirmed as compatible with WordPress up to version 5.9.5 (October 17 2022). question Create new local user not possible

Create new local user not possible: users show bugs, compatibility, missing feature pain that may indicate a product gap.

Shibboleth · Create new local user not possible For the moment the plugin shibboleth version 2.1.1 is installed. mixed Tried to deactivate but site is no longer loading

Tried to deactivate but site is no longer loading: users show bugs, compatibility, support pain that may indicate a product gap.

SAML Single Sign On – SSO Login · Tried to deactivate but site is no longer loading Fatal error : require_once(): Failed opening required ‘/home/tantricastro/public_html/wp-config.php’ (include_path=’.:/opt/cpanel/ea-php74/root/usr/share/pear’) in /home/tantricastro/public_html/wp-load.php on line 50 Above is the error message. mixed Help With Activating Plugin

Help With Activating Plugin: users show bugs, performance, support pain that may indicate a product gap.

Logto – User Authentication and Authorization · Help With Activating Plugin Hello ! complaint PHP Error in version 3.4.0

PHP Error in version 3.4.0: users show bugs, compatibility pain that may indicate a product gap.

OneLogin SAML SSO · PHP Error in version 3.4.0 Getting a php error in wp-login.php PHP message: Fatal error: Uncaught Error: Call to undefined function is_plugin_active() in /var/www/wp-content/plugins/onelogin-saml-sso/php/functions.php:108 I guess it would need function_exists('is_plugin_active') , or hook into admin_init This topic was modified 2 years, 6 months ago by Julio complaint Uncaught error on login page.

Uncaught error on login page.: users show bugs, compatibility pain that may indicate a product gap.

Logto – User Authentication and Authorization · Uncaught error on login page. complaint SAML Replay Attack

A security scan reported a possible SAML replay attack vulnerability, and the vendor is investigating whether the plugin needs a fix.

WP SAML Auth · The recent scan has reported a potential SAML Replay Attack vulnerability mixed Admin nag

Admin nag: users show security, compatibility, setup pain that may indicate a product gap.

WP SAML Auth · Admin nag I updated to the new version (2.2.0) and there is now a nagging alert at the top of all admin pages telling me to upgrade SimpleSamlPHP. mixed Does CVE-2024-2172 impact miniOrange SSO?

Does CVE-2024-2172 impact miniOrange SSO?: users show security, missing feature, support pain that may indicate a product gap.

SAML Single Sign On – SSO Login · NVD – CVE-2024-2172 (nist.gov) The page I need help with: [ log in to see the link] A number of miniOrange plugins have recently been found to be vulnerable, as outlined under CVE-2024-2172. mixed Not compatible with PHP 5.6

Not compatible with PHP 5.6: users show bugs, compatibility, support pain that may indicate a product gap.

SAML Single Sign On – SSO Login · Not compatible with PHP 5.6 When attempting to activate the plug-in, a fatal error occurs. complaint Authcontext prevents login

WP SAML Auth sent an authentication context that broke Microsoft Entra logins, and users needed configuration workarounds even after a release addressed part of it.

WP SAML Auth · we were not able to log in via SAML anymore question [Feature Request] Specify Roles that Require SAML SSO

The user wants SAML SSO requirements by role so administrators can be forced through SSO while normal ecommerce customers keep standard logins.

WP SAML Auth · requiring administrators to login through SSO, but not users mixed Allow multiple MFA types

Remote users switching to Windows Hello hit SAML login errors and needed code-level filter configuration after the plugin release.

WP SAML Auth · remote users have been migrating away from a username/password to “Windows Hello” and receiving login errors complaint WPEngine requires addition

OneLogin SAML SSO does not work on WPEngine production unless host login security is turned off, and the user suggests a code change to avoid that.

OneLogin SAML SSO · doesn’t work on their production environment unless they turn off their login auth complaint CRITICAL error – ubuntu php dom issues after setting up Azure AD

An Azure SAML setup authenticates with Entra but then triggers a WordPress critical error on Ubuntu PHP 8.1, blocking the user from evaluating premium features.

SAML Single Sign On – SSO Login · It does succeed in exchanging auth with Azure \ Entra ... But then WordPress gives the generic “There has been a critical error” complaint 1.16.2 introduced a fatal PHP error

A miniOrange SAML update introduced a fatal PHP error in a related identity-provider plugin, and support said the team was already working on it.

SAML Single Sign On – SSO Login · Version 1.16.2 has a fatal error, but 1.16.1 works. praise Works great!

Works great!: users show bugs, compatibility, missing feature pain that may indicate a product gap.

WP SAML Auth · Works great! neutral Malicious code detected from Wordfence scan

Malicious code detected from Wordfence scan: users show security, bugs, compatibility pain that may indicate a product gap.

SAML Single Sign On – SSO Login · Malicious code detected from Wordfence scan This email was sent from Wordfence plugin to our account : Critical Problems: Filename: /wp-content/plugins/miniorange-saml-20-single-sign-on/includes/lib/mo-options-enum.php File Type: Not a core, theme, or plugin file from wordpress.org. neutral xmlseclibs vulnerability

xmlseclibs vulnerability: users show security, compatibility pain that may indicate a product gap.

WP SAML Auth · xmlseclibs vulnerability There was a vulnerability in xmlseclibs as described at https://portswigger.net/research/the-fragile-lock . praise A really good job.

A really good job.: users show security pain that may indicate a product gap.

Datawiza Proxy Auth Plugin – SSO · Works like a charm. praise Payment for use this plugin

Payment for use this plugin: users praise value, which suggests what competitors already do well.

OneLogin SAML SSO · Payment for use this plugin I checked another SSO plugin. complaint Custom redirectTo field after succesfull login

Custom redirectTo field after succesfull login: users show bugs, compatibility, missing feature pain that may indicate a product gap.

WP SAML Auth · Custom redirectTo field after succesfull login Project Requirement: Custom Redirect URL After Successful Login For one of our projects, we aim to enhance user experience by allowing administrators to specify a custom redirect URL for users after a successful login. complaint Loop redirect to top level domain from subfolder WP

Loop redirect to top level domain from subfolder WP: users show bugs, compatibility, missing feature pain that may indicate a product gap.

OneLogin SAML SSO · Has anybody has the same issue – I have a wp site in a subfolder: such as https://www.topleveldomain.com/wp-site/ the plugin installed, logs in users fine but redirects to https://www.topleveldomain.com/-/-/-/-/-/-/-/-/-/-/ is there something wrong in my settings that i have to fix? complaint Plugin issue

Plugin issue: users show bugs, compatibility, missing feature pain that may indicate a product gap.

WP SAML Auth · Plugin issue Hello Team, Once installed the plugin I got this error ” WP SAML Auth wasn’t able to find the SimpleSAML_Auth_Simple class. complaint Bypass the SSO

Bypass the SSO: users show compatibility, missing feature, support pain that may indicate a product gap.

WP SAML Auth · Bypass the SSO Hi All, We need a help with by passing the SSO . complaint Custom mapping for user_login

Custom mapping for user_login: users show bugs, compatibility, missing feature pain that may indicate a product gap.

WP SAML Auth · Custom mapping for user_login I have the below SAML response and i need to map the UserLoginID to user_login.