[Feature] - Integrazione plug-in SAML2 to wordpress

[Pyscho79]

• Creation example project in repository:
  • WordPress setup
  • WordPress bootstrap Italia template setup
  • WordPress SAML2 OneLogin plugin setup
  • WordPress SAML2 OneLogin Donwload Metadata from wordpress sp
  • WordPress SAML2 OneLogin Test with IDP spid-saml-check
• Setup Documentation:
  • WordPress setup
  • WordPress bootstrap Italia template setup
  • WordPress SAML2 OneLogin plugin setup
• [DEMO] Docker Compose  #41
  • readme docker image setup

[MurruAlessio]

Created WordPress instance using docker-compose

The commit includes the docker-compose file used to create a WordPress instance with multiple containers, including a database container for the MariaDB database and a phpmyadmin container for managing the database through a web interface.

The WordPress container uses version 5.4 to ensure compatibility with the ItaliaWP2 theme. However, it should be noted that this version of WordPress has some vulnerabilities that are fixed in version 6.6.

[MurruAlessio]

I have successfully installed the ItaliaWP2 theme from the GitHub repository https://github.com/italia/design-wordpress-theme-italiaWP2 and set it as the active theme for WordPress instance.

[MurruAlessio]

I installed the OneLogin SAML SSO plugin to enable SAML connection on the Wordpress instance. I am currently still in the process of testing the plugin, which has not yet been configured with an IdP.

[peppelinux]

Can you see/download the wordpress saml2 metadata?
you have to download the satosa frontend metadata to your sp before starting an authn request

[peppelinux]

Created WordPress instance using docker-compose

The commit includes the docker-compose file used to create a WordPress instance with multiple containers, including a database container for the MariaDB database and a phpmyadmin container for managing the database through a web interface.

The WordPress container uses version 5.4 to ensure compatibility with the ItaliaWP2 theme. However, it should be noted that this version of WordPress has some vulnerabilities that are fixed in version 6.6.

since it is just for the example project, we just have to indicate in the tutorial/configuration/readme that this is just for demo purpose and MUST NOT used in production contexts

we use this WP just as an example of legacy infrastructure

[Pyscho79]

Can you see/download the wordpress saml2 metadata? you have to download the satosa frontend metadata to your sp before starting an authn request

Yew confirm download metadata form wordpress

[Pyscho79]

@MurruAlessio need to test the new release Satosa-Saml2Spid v1.0.1
https://github.com/italia/Satosa-Saml2Spid/releases/tag/v1.0.1

[MurruAlessio]

below is the pull request with SaToSa integration changes for Wordpress plugin integration test
italia/iam-proxy-italia#77