v1.8.1
Enterprise Auth 1.8.1
- Compatibility: marked the plugin as tested up to WordPress 7.0 and aligned release metadata with version 1.8.1.
- Feature: added server-side OpenID Connect Discovery and readiness checks for safer OIDC provider setup.
- Feature: expanded SAML custom attribute mapping with immutable UID attribute support and provider presets.
- Security: centralized SAML/OIDC federation flow state with browser-bound, short-lived, single-use transients and HTTPS transport enforcement.
- Security: added SCIM pre-auth failed-attempt throttling and reset handling after successful authorized requests.
- Fix: shared session creation guard now blocks SCIM-suspended users consistently across authentication paths before WordPress sessions are created.
Installable plugin package
Use enterprise-iam-v1.8.1.zip from the Assets section for WordPress installation. Do not install GitHub’s auto-generated “Source code” archives; those archives do not include Composer vendor/ dependencies.