kleinweb/saml-auth

The source code for Kleinweb SAML Auth

Installs: 216

Dependents: 0

Suggesters: 0

Security: 0

Stars: 1

Watchers: 2

Forks: 0

Open Issues: 17

pkg:composer/kleinweb/saml-auth

6.0.2 2026-01-14 21:08 UTC

README

A WordPress SAML 2.0 authentication package for Klein College sites. Built as an Acorn service provider, it wraps wp-saml-auth with custom login page modifications, managed user provisioning, and bulk user import capabilities.

Features

  • SAML 2.0 Single Sign-On via institutional Identity Provider
  • Custom WordPress login page with IdP toggle
  • Managed user accounts with SAML attribute mapping
  • Bulk user import from CSV
  • SP metadata endpoint at /sp/metadata

Requirements

Installation

composer require kleinweb/saml-auth

The service provider is auto-discovered via Acorn. Configure in config/kleinweb-auth.php.

Configuration

X.509 certificates should be placed in .config/x509/:

  • .config/x509/keys/<name>.key - Private key
  • .config/x509/certs/<name>.crt - Certificate

Key config options in config/kleinweb-auth.php:

  • allow_local_login - Enable/disable WordPress password login (default: true)
  • auto_provision - Auto-create accounts for new IdP users (default: false)
  • default_role - Role assigned to provisioned users

Development

just check    # Run all QA checks
just fix      # Apply formatters and fixers
just build    # Build frontend assets
just dev      # Watch mode

Tools

References

SAML Specifications

SAML Attribute Naming Conventions

Background