search

SAML-Toolkits / wordpress-saml

OneLogin SAML plugin for Wordpress
MIT License
65 stars 75 forks source link

Force SAML Login #98

Closed ferhotguy closed 3 years ago

ferhotguy commented 4 years ago

After enabling force saml login feature, actual main URL also redirects back to OneLogin instance... How this is possible? Are they settings in WordPress or OneLogin that I am missing ?

Thanks

ferhotguy commented 4 years ago

example https://mydomain.com/wp-admin works fine with SAML onelogin, however after enabling force saml only option, https://mydomain.com also automatically redirects back to onelogin instance...

pitbulk commented 4 years ago

You are "Forcing SAML login", so if there is no session at WP, you are redirected to Onelogin in order to authenticate, and then a SAMLResponse is sent to WP SP ACS URL in order to process it, validate it and log the user.