Feature Request – Optional group adjusting

In my situation it’s difficult to put manage permissions via groups passed in the assertions. The problem is by default this plugin resets everyones role to subscriber on login. I’ve removed the update_role call as part of simulate login to prevent this from happening.

It would be nice if the plugin had a few more options for role setup. A few useful scenarios are below.

1) Setup role on first login only
2) Force role on every login
3) Only force role change if role is associated with group in IDP, if no group in IDP create with subscriber, but if user already exists leave in current group.

Number 3 allows me to setup a “failsafe” group via the IDP, but manage roles via wordpress. Currently I’m executing in scenario 1 now and it works. I may have a change to code #3, but it won’t be for a bit.

https://wordpress.org/plugins/saml-20-single-sign-on/