Ready to get started?Download WordPress

Plugin Directory


Allows WordPress to externalize user authentication and account creation to a Shibboleth Service Provider.

First and foremost, you must have the Shibboleth Service Provider properly installed and working. If you don't have Shibboleth working yet, I assure you that you won't get this plugin to work. This plugin expects Shibboleth to be configured to use "lazy sessions", so ensure that you have Shibboleth configured with requireSession set to "false". Upon activation, the plugin will attempt to set the appropriate directives in WordPress's .htaccess file. If it is unable to do so, you can add this manually:

AuthType Shibboleth
Require Shibboleth

The option to automatically login the users into WordPress also works when not using the lazy session options as it will force login into WordPress. In other words, if the user has an active session and you are requiring authentication to access this WordPress site and they need to be logged into WordPress, then they will be logged in without having to use the WordPress login page.

This works very well for sites that use WordPress for internal ticketing and helpdesk functions where any access to content requires authentication. Consider the following .htaccess options when used in conjunction with the automatic login feature

AuthType Shibboleth
ShibRequireSession on
Require valid-user


Authtype Shibboleth
ShibRequireSession on
Require isMemberOf group1 group2
Require sAMAccountName user1 user 2

NOTE: If the plugin is successful in updating your .htaccess file, it will place the option between a marked block:

BEGIN Shibboleth END Shibboleth

If you add more options, you may want to consider moving all configuration options out of this block as they will be cleared out upon deactivation of the plugin.

For single-user WordPress

Upload the shibboleth folder to your WordPress plugins folder (probably


), and activate it through the WordPress admin panel. Configure it from the Shibboleth settings page.

For WordPress MU

Shibboleth works equally well with WordPress MU using either vhosts or folders for blogs. Upload the shibboleth folder to your mu-plugins folder (probably /wp-content/mu-plugins). Move the file shibboleth-mu.php from the shibboleth folder up one directory so that it is in mu-plugins alongside the shibboleth folder. No need to activate it, just configure it from the Shibboleth settings page, found under "Site Admin".

Requires: 3.3 or higher
Compatible up to: 3.9.2
Last Updated: 2014-4-7
Downloads: 4,055


4 stars
4.5 out of 5 stars


0 of 4 support threads in the last two months have been resolved.

Got something to say? Need help?


Not enough data

0 people say it works.
0 people say it's broken.

0,1,0 100,1,1
100,1,1 100,1,1