Active installationsNewAdoption metric — not a quality score
WordPress.org rating5.0 / 5 from 1 ratings
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Signclave – SSO for SAML and LDAP version 1.0.3 as active, updated 3d ago and tested up to WordPress 7.1.
Overview
About this plugin
WordPress SAML Service Provider with optional LDAP fallback.
com/Considbrs-Webdev/signclave-sso
Features:
php
– Signed assertion validation (XML signature + digest)
– Replay protection, signed RelayState, redirect allowlisting
– Optional LDAP authentication fallback
– Optional group-to-role mapping
– Security audit logging
Security
This plugin follows WordPress and OWASP-oriented practices:
SAML signatures verified only against the configured IdP X.509 certificate (pinned).
Strict SAML validation (audience, destination, issuer, InResponseTo) enabled by default.
Emergency local login requires a secret key (?password=1&signclave_sso_key=... ), not a public flag.
Proxy HTTPS headers are ignored unless explicitly enabled.
Account linking by email is off by default.
LDAP bind passwords encrypted at rest (AES-256-GCM).
When LDAP is enabled and fully configured, SAML must verify the directory before provisioning a new WordPress user. Existing WordPress accounts can still sign in via SAML if LDAP is down.
With LDAP disabled or incomplete, SAML runs alone (JIT from IdP attributes; local accounts match by username).
No raw SQL; admin actions require manage_options and nonces.
Topics listed for this plugin in the WordPress.org directory.
active directory
single sign on
sign on
ldap
saml
sso
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.0 · PHP 8.2
Update activity30 Oct 20263d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.0.1→1.0.3
WordPress compatibility7.1.3→7.1.4
Version1.0.0→1.0.1
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
