OAuth Single Sign On – SSO (OAuth Client) free WordPress plugin
Description
OAuth Single Sign On – SSO (OAuth Client) free WordPress plugin
WordPress Single Sign-On (SSO) with OAuth / OpenID Connect plugin allows login (Single Sign On) with your Office 365, Azure AD, Azure B2C, Clever, AWS Cognito, WSO2, Ping, Keycloak, WHMCS, Okta, LinkedIn, Invision Community, Slack, Amazon, Discord, Twitter, Google Apps or other custom OAuth 2.0 / OpenID Connect providers. WordPress OAuth Client plugin works with any Identity provider that conforms to the OAuth 2.0 Server and OpenID Connect (OIDC) 1.0 standard.
It also provides unlimited User Authentication with OAuth & OpenID Connect protocol and allow authorized user to login into WordPress site. Support provided for Single site & Multisite Network enviornments.
WordPress Single Sign-On(SSO)
Single Sign On(SSO) means login into any site / application using the credentials of another app/site.
Example. If you have all your Users/Customers/Members/Employees stored on 1 site(ex. gmail, wordpress, etc.), lets say site A and you want all of them to register/login into your WordPress site say site B. In this scenario, you can register/login all your users of site A into Site B using the login credentials/account of Site A. This is call Single Sign-On or SSO.
WordPress Single Sign On supported Third Party Application / OAuth-OIDC Provider
The other terms are: OAuth Provider, OAuth Server, OpenID Connect Server, OpenID Connect Provider, OIDC Provider, OIDC Server, OAuth Application, OpenID Connect Application, OIDC Application, OpenIDConnect Server, OpenIDCConnect Provider, OpenIDConnect Application
This Third Party Application can be anything where User Accounts are stored or site/application where you want to store/migrate all the users. It can be your social app/site, wordpress, custom app or any database.
WordPress Single Sign On USE-CASES
Single Sign-On between WordPress – WordPress(Login with WordPress) :
Single Sign-On to 1 WordPress site (single / multisite) using User Credentials stored on Another WordPress site
Single Sign-On to 1 / multiple WordPress sites (or subsites) using User Credentials stored on Another WordPress site
Single Sign-On between WordPress and Any OAuth / OpenID Connect (OIDC) application(Login with Social Login Apps / Custom Providers) :
1. Single Sign-On to 1 WordPress site (single / multisite) using User Credentials stored on your third party application
Single Sign-On to 1 / multiple WordPress sites (or subsites) using User Credentials stored on Another WordPress site
Single Sign-On into WordPress Using existing User stores (Active Directory/Database)
FREE VERSION FEATURES
WordPress OAuth Login supports single sign-on / SSO with any 3rd party OAuth / OpenIDConnect server or custom OAuth / OpenIDConnect server like AWS Cognito, Azure, Office 365, Google Apps, etc.
Single Sign On (SSO) Grant Support – Standard OAuth 2.0 Grant : Authorization Code
Auto Create Users (User Provisioing) : After SSO, new user automatically gets created in WordPress
Account Linking : After user SSO to WordPress, if user already exists in WordPress, then his profile gets updated or it will create a new WordPress User
Attribute Mapping : OAuth Login supports username Attribute Mapping feature to map WordPress user profile username attribute.
Login Widget : Use Widgets to easily integrate the login link with your WordPress site
OpenID Connect / OAuth Provider Support : OAuth Login (Single Sign On) supports only one OpenID Connect / OAuth Provider.
Redirect URL after Login : OAuth Login (Single Sign On) Automatically Redirects user after successful login.
Logging : If you run into issues OAuth Login (Single Sign On) can be helpful to enable debug logging
STANDARD VERSION FEATURES
All the FREE Version Features included.
WordPress Single Sign On (SSO) Grant Support – Standard OAuth 2.0 Grant : Authorization Code
Optionally Auto Register Users : OAuth Login (Single Sign On) does automatic user registration after login if the user is not already registered with your site
Basic Role Mapping : OAuth Login (Single Sign On) provides basic Attribute Mapping feature to map WordPress user profile attributes like username, firstname, lastname, email and profile picture. Manage username & email with data provided.
Also, Assign default role to user registering through OAuth Login based on rules you define.
Support for Shortcode : Use shortcode to place OAuth login button anywhere in your Theme or Plugin
Customize Login Buttons / Icons / Text : Wide range of OAuth Login (Single Sign On) Buttons/Icons and it allows you to customize Text shadow
Custom Redirect URL after Login : WordPress OAuth Single Sign On / SSO provides auto redirection and this is useful if you wanted to globally protect your whole site
Custom Redirect URL after logout : WordPress OAuth Single Sign On / SSO allows you to auto redirect Users to custom URL after he logs out from your WordPress site
PREMIUM VERSION FEATURES
All the STANDARD Version Features
WordPress Single Sign On (SSO) Grant Support – Standard OAuth2.0 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available)
Advanced Role Mapping : Assign roles to users registering through OAuth Login(Single Sign On) based on rules you define.
Force Authentication / Protect Complete Site : Allows user to restrict login(Single Sign On) / authorization for particular site
Multiple Userinfo Endpoints Support : OAuth Login(Single Sign On) supports multiple Userinfo Endpoints.
App domain specific Registration Restrictions : OAuth Login (Single Sign On) restricts registration on your site based on the person’s email address domain
Multisite Support : OAuth Login(Single Sign On) have unique ability to support multiple sites (multisite) under one account
ENTERPRISE VERSION FEATURES
All the PREMIUM Version Features
Multiple OAuth / OpenID Connect Provider Support
WordPress Single Sign On (SSO) Grant Support – Standard OAuth2.0 Grants : Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant, Client Credential Grant, Hybrid Grant (Customization Available)
Single Login button for Multiple Apps : It provides single login button for multiple providers
Extended OAuth API support : Extend OAuth API support to extend functionality to the existing OAuth client.
BuddyPress Attribute Mapping : OAuth Login allows BuddyPress Attribute Mapping.
Page Restriction according to roles : Limit Access to pages based on user status or roles. This WordPress OAuth Login plugin allows you to restrict access to the content of a page or post to which only certain group of users can access.
WP Hooks for Different Events : Provides support for different hooks for user defined functions
Single Sign On Login Reports : OAuth Login (Single Sign On) creates user login and registration reports based on application used.
No SSL restriction
Login to WordPress (WordPress SSO) using Google credentials (Google Apps Login) or any other app without having an SSL or HTTPS enabled site.
List of popular OAuth / OpenID Connect Providers we support for Single Sign On (SSO)
Office 365
Azure B2C
Azure AD
Twitter
AWS Cognito
Keycloak
Clever
WHMCS
Ping Federate (Ping / Ping Identity)
Slack
Discord
WSO2
Salesforce
PayPal
Google Apps
Okta
OneLogin
Yahoo
OpenAthens
LinkedIn
Gitlab
Gluu Server
GitHub
Box
IdentityServer4
HR Answerlink / Support center
Zoho
Apple
Wechat
Weibo
Shibboleth
Blizzard (Formerly Battle.net)
servicem8
Meetup
Eve Online
NetIQ
Centrify
Shibboleth
Egnyte
Twitter
OpenAM
Basecamp
Steam
Webflow
Amazon
ADFS
Gigya
Swiss-RX-Login (Swiss RX Login)
PhantAuth
XING
Centrify
Egnyte
DID
Stripe
List of grant types we support for WordPress Single Sign On (SSO)
Authorization code grant
Implicit grant
Resource owner credentials grant (Password Grant)
Client credentials grant
Refresh token grant
Hybrid Grant
Other OAuth / OpenID Connect Providers we support for WordPress Single Sign On (SSO)
Other oauth 2.0 servers oauth single sign-on plugin support includes Office 365, Egnyte, Autodesk, Zendesk, Foursquare, Harvest, Mailchimp, Bitrix24, Spotify, Vkontakte, Huddle, Reddit, Strava, Ustream, Yammer, RunKeeper, Instagram, SoundCloud, Pocket, PayPal, Pinterest, Vimeo, Nest, Heroku, DropBox, Buffer, Box, Hubic, Deezer, DeviantArt, Delicious, Dailymotion, Bitly, Mondo, Netatmo, Amazon, FitBit, Clever, Sqaure Connect, Windows, Dash 10, Github, Invision Community, Blizzard, authlete, Keycloak, Procore, Eve Online, Laravel Passport, Nextcloud, Renren, Soundcloud, OpenAM, IdentityServer, ORCID, Diaspora, Timezynk, Idaptive, Duo Security, Rippling, Crowd, Janrain, Numina Solutions, Ubuntu Single Sign On, Apple, Ipsilon, Zoho, Itthinx, Fellowshipone, Miro, Naver, Clever etc.
WordPress Single Sign On (SSO) Supported Add-ons
We have a variety of add-ons that can be integrated with the OAuth Single Sign On plugin to improve the OAuth SSO functionality of your WordPress site.
Page Restriction – This add-on is basically used to protect the pages/posts of your site with OAuth / OpenID Connect compliant IDP(Server) login page and also, restrict the access to pages/posts of the site based on the user roles.
BuddyPress Integration – This add-on maps the attributes fetched from the OAuth / OpenID Connect compliant IdP with BuddyPress attributes.
Login Form Add-On – This add-on provides Login form for OAuth/OpenID login instead of a only a button. It relies on OAuth/OpenID plugin to have Password Grant configured. It can be customized using custom CSS and JS.
Membership Level based Login Redirection – This add-on allows to redirect users to custom pages based on users’ membership levels after Single Sign On. Checks for the user’s membership level during every login, so any update on the membership level doesn’t affect redirection.
Discord Role Mapping – Discord Role Mapping add-on helps you to get roles from your discord server and maps it to WordPress user while SSO.
Real Time User Provisioning using SCIM
Provides use-provisioning from your IDP to your WordPress using SCIM standard. You can refer our WordPress User Provisioning using SCIM plugin.
REST API Authentication
Secures the unauthorized access to your WordPress sites/pages using our WordPress REST API Authentication plugin.