Also a nice touch that you can just hide the old login, to avoid confusion and defer hackers even more. Great job @qlcvea / Marco and thank you!
]]>Miniorange sso plugin is a nightmare with terrible support. Does anyone have experience with alternative plugins? Many thanks!
j
]]>PHP Version: PHP 7.4.14.
WordPress version: 6.0
]]>My site employs Miniorange for SAML SSO integration with OKTA. Recently, excessive binlog creation filled up the drive space, leading to the app going down (This binlog is used to copy the data over to a replica database)
Looking at the db logs , I can see there are repetitive requests to update mo_saml_session_index and mo_saml_request, which might be the reason why binlogs are getting full.
Miniorange helpdesk suspects wordpress blocking miniorange from setting wordpress_logged_in cookie, is causing SAML requests to loop endlessly.
But the issue started happening all of a sudden.
How and where can I whitelist the Miniorange SSO plugin to use wp_set_auth_cookie in a self-hosted environment? (Wp site is hosted on 3 linux server, we are using nginx. Database is stored accross two other separate dbs)
Any insights on preventing SAML requests from going into loops?
The wordpress site is customized, I cannot directly modify (install or update plugins) Will have to do that by deployment.
]]>Would I require a separate .pem file in my root directory for each site I want to lock down with SAML, or would a .pem file from Google SSO have to contain information about the sites that need to be locked down?
Right now we have it working in the root directory, but if I activate the plugin in a sub-directory based subsite such as https://website.com/subdirectoy-site/ I get an error “Error: app_not_configured_for_user“.
Thanks for reading.
Most recently, we received an excellent and timely technical support from a miniOrange representative, Uday Sawant, who was patient, prompt, and knowledgeable in understanding the issue we had and provided the solution within 30 minutes to resolve the issue.
We highly recommend miniOrange and their product suite for your IT solutions.
The Mulgova Team
mulgova.com
]]>——–
OneLogin SAML SSO (version 3.4.0) PHP version 7.3.6RC1 Error Details ================== An error of type E_ERROR occurred on line 108 of the / file home/admin/web/web.es/public_html/wp-content/plugins/onelogin-saml-sso/php/functions.php. Error message: Uncaught Error: Call to undefined function is_plugin_active() in /home/admin/web/web.es/public_html/wp-content/plugins/onelogin-saml-sso/php/functions.php:108 Stack trace: #0 /home/admin/web/web.es/public_html/wp-includes/class-wp-hook.php(307): saml_custom_login_footer(”) #1 /home/admin/web/web.es/public_html/ wp-includes/plugin.php(189): WP_Hook->apply_filters(”, Array) #2 /home/admin/web/web.es/public_html/wp-login.php(218): apply_filters(‘login_message’ , ”) #3 /home/admin/web/web.es/public_html/wp-login.php(1371): login_header(‘Login’, ”, Object(WP_Error)) #4 {main} thrown`
———-
It does not happen with the version WP Migrate Lite 2.3.0
]]>