3.4.0 Wordpress plugin using the Onelogin PHP Toolkit

• Update php-saml to 3.6.1 and xmlseclibs to 3.1.1
• Support Passive mode and don't raise error when passive authentication failed
• Allow set desired target on saml_sso endpoint by the use of a 'target' GET parameter
• Add new parameter to determine if the account was created or already existed
• Add Support for WPS Hide Login
• Use add_query_arg to better adjust login URLs
• Login always returned to frontend page, now if redirect_to is set, redirects there

3.3.1 Wordpress plugin using the Onelogin PHP Toolkit

• wp_login was triggered with wrong arguments, user object was not initialized
• Minor refactor on redirect_to_relaystate_if_trusted method

3.3.0 Wordpress plugin using the Onelogin PHP Toolkit

• Add support for Nickname user field
• Fix redirect protection. Absolute URLs failed and only relatives were accepted
• Add support for saml_nameid_name_qualifier and saml_nameid_name_sp_qualifier which fixes detected issues on SLO process with ADFS
• Add to setcookie method the cookie domain, secure flag and httponly
• #101 SAML request was improperly generated when requestedAuthNContext was empty.
• Replace deprecated method (sanitize_url --> esc_url_raw )
• Support triggering wp_login hook controller by a setting
• Update php-saml to 3.5.0

3.2.1 Wordpress plugin using the Onelogin PHP Toolkit

• Sanitize inputs
• Update php-saml to 3.4.1
• Fix nameidformat field

3.2.0 Wordpress plugin using the Onelogin PHP Toolkit

• Avoid untrusted redirections
• Disable SAML on CLI/Cron on ACS and SLS endpoints. Allow custom filter to disable SAML
• Support multi-role
• Fix variable assignment during conditional check
• Swap to manage_options for the cap check on the validate page.
• Fix unintentional variable assignment
• Set 1000 as the limit of sites to be managed by SAML network settings

3.1.2 Wordpress plugin using the Onelogin PHP Toolkit

• Minor fix to extract all sites for the multi-site features

3.1.1 Wordpress plugin using the Onelogin PHP Toolkit

• Multisites: Add the option to automatically enroll users on sites when a SAML Network setting enabled
• Fix #86. Set default role when not provided only on create action
• Detect Ajax and cron tasks

3.1.0 Wordpress plugin using the Onelogin PHP Toolkit

• Multisite improvement. Now when multisite is enabled, on the "Network Admin" dashboard appears a "Network SAML Settings" where you can define a SAML template setting, and then inject it in sites. Also will allow you enable/disable multiple sites on a unique view.
• Now the onelogin_saml_keep_local_login will also hide the login form on wp-login.php view. So when on a logout action, we can notify the user with the typical message of 'You are now logged out.' without showing the local login form.
• Update php-saml to 3.3.1
• Update xmlseclibs to 3.0.4

3.0.0 Wordpress plugin using the Onelogin PHP Toolkit

• Update php-saml to 3.1.0. Make the code compatible
• Overriding user_register will prevent admins to register users, Avoid it
• #70 Stop using $blog_id before it's defined

2.8.0 Wordpress plugin using the Onelogin PHP Toolkit

• Update php-saml to 2.14.0
• Remove the use of screen_icon method