Since version 11.14 of the plugin it is possible to configure advanced settings for the (OneLogin) SAML 2.0 library (see https://github.com/onelogin/php-saml for an example of such settings). This may be needed if you need to allow for multiple authentication options when users receive – for example – the following error Authentication method ‘WindowsIntegrated’ by which the user authenticated with the service doesn’t match requested authentication method ‘Password, ProtectedTransport’.
Advanced settings need to be added as a PHP constant to your wp-config.php file. The following example illustrates how you can add support for the WindowsIntegrated authentication method.
define( 'WPO_SAML2_ADVANCED_SETTINGS',
array(
'security' => array(
'requestedAuthnContext' => array (
'urn:federation:authentication:windows',
'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',
'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport',
)
)
)
);
/* That's all, stop editing! Happy publishing. */