Registering Metadata for a WordPress Site using miniOrange

This document explains step-by-step how to configure the IDP to your WordPress site using miniOrange.

Configuring the miniOrange Plugin with the IDP

Authentication via NetID Login for WordPress

We can use the free version of miniOrange plugin to provide SAML authentication for a WordPress site.

Note: The free version of miniOrange has limited functionality; you will only be able to use the Name attribute and you cannot remap other attributes.

For a step-by-step video guide, click here.

Installing the miniOrange Plugin

Log in to your WordPress admin account.
Click Plugins on the left side of your Home page, then in the search bar type SAML.
Click on SAML Single Sign On - SAML SSO Login, then Activate.

Activate miniOrange plugin

miniOrange is now installed on your WordPress account.

Configuring the miniOrange Plugin with the IDP

In the Plugins page, click on miniOrange, then Service Provider Setup.
Scroll down, then click on Upload IDP Metadata File/XML.
In the "Enter Metadata URL" box, put in the URL for prod, https://login.wisc.edu/idp/shibboleth
Click Fetch Metadata.

Generating Metadata with miniOrange

The service provider will then need its metadata uploaded to the campus IDP, you will need to generate and deliver a metadata file to the IAM team to complete this step. To generate an XML metadata file:

On the Service Provider Metadata tab scroll down to Metadata XML File
Click the Download button

Once downloaded the metadata file will need some modifications.

Set the NameIDFormat attribute to emailAddress:
- <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
From the "EntityDescriptor" line, it is also worth removing validUntil and cacheDuration.

See example entity: https://login.wisc.edu/metadata-manager/entities/8dcb6fdd238b9e85d2086ddcfd63f0174a4168eb/view