Integrate DocCheck OAuth2 login functionality into your WordPress site.

DocCheck agency (antwerpes)

DocCheck Login

Open source DocCheck plugin for authenticating healthcare professionals via secure DocCheck login integration.

The DocCheck Access plugin integrates DocCheck’s OAuth2 authentication system into your WordPress site, allowing medical professionals to log in using their DocCheck credentials.
Note: Using DocCheck Access requires the Economy or Business license model. This plugin cannot be used with the Basic license model. Please contact DocCheck for details on available license models.
<h4>Features</h4>
<ul>
<li>Adds a DocCheck login button via shortcode or automatic page-level protection</li>
<li>OAuth 2.0 Authorization Code flow with PKCE for secure authentication</li>
<li>Two authentication modes: Anonymous Session and WordPress User creation</li>
<li>Per-page and global content protection with role-based access control</li>
<li>Configurable scope and user metadata mapping</li>
<li>Template override support for protected pages</li>
<li>Hooks and filters for developers to customize behavior</li>
</ul>
<h4>External Services</h4>
This plugin connects to the following external services:
DocCheck OAuth Server (<code>https://auth.doccheck.com</code>)
Used to exchange the OAuth authorization code for an access token and to retrieve the authenticated user’s profile data. This connection is only made when a visitor actively clicks the DocCheck login button. Please refer to the <a href="https://www.doccheck.com/privacy" rel="nofollow ugc">DocCheck Privacy Policy</a> and <a href="https://www.doccheck.com/terms" rel="nofollow ugc">DocCheck Terms of Service</a>.
DocCheck CDN (<code>https://dccdn.de</code>)
The DocCheck login button is a web component whose script is served from DocCheck’s CDN. It is loaded only on pages where the <code>[docacc_login]</code> shortcode or page-level protection is active — not on every page. Please refer to the <a href="https://www.doccheck.com/privacy" rel="nofollow ugc">DocCheck Privacy Policy</a>.
No data is transmitted to any other third-party service.
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.2 or higher</li>
<li>A DocCheck OAuth client ID and client secret (obtainable from DocCheck)</li>
</ul>
<h4>General Settings</h4>
Go to Settings > DocCheck Login in your WordPress admin to configure the plugin. You can also open the settings directly from the Settings link on the WordPress plugins overview screen.
OAuth Credentials
<ul>
<li>Client ID — Your DocCheck OAuth Client ID.</li>
<li>Client Secret — Your DocCheck OAuth Client Secret.</li>
<li>Redirect URI — Auto-generated based on your site URL. Copy this value into your DocCheck application settings.</li>
</ul>
Redirection & Debug
<ul>
<li>Default Target Page — The page users land on after a successful login.</li>
<li>Debug Mode — Logs detailed API and authentication information. Disable on production sites.</li>
</ul>
Content Protection
<ul>
<li>Make all Pages Private — Requires DocCheck login for every page on the site.</li>
<li>Auto-assign Parent Configurations — Child pages automatically inherit their parent page’s protection status.</li>
<li>Login Button Version — Pin a specific component version (e.g. <code>3.2.7</code>) or use <code>@latest</code> to always load the most recent version.</li>
</ul>
<h4>User Management</h4>
Authentication Modes
<ul>
<li>Anonymous Session — Users are authenticated via DocCheck but no WordPress user account is created. Data is held only for the duration of the PHP session and is not stored permanently.</li>
<li>WordPress User — A WordPress user account is created or linked on the visitor’s first DocCheck login. Allows persistent storage of user properties and role-based access control.</li>
</ul>
Role & Metadata
<ul>
<li>Default User Role — The WordPress role assigned to newly created DocCheck users. Only low-privilege roles (those without <code>manage_options</code> or <code>edit_others_posts</code> capabilities) are available for selection. Administrator and Editor roles cannot be assigned to DocCheck users.</li>
<li>Automatic User Creation — Disabled by default. In WordPress User mode, local user creation for first-time DocCheck logins must be explicitly enabled by an administrator.</li>
<li>Scope & Property Selection — Choose which DocCheck scopes to request and which user properties to store as WordPress user metadata.</li>
</ul>
<h4>Developer Hooks</h4>
Actions
<ul>
<li>
<code>docacc_user_created</code> — Fires after a new WordPress user is created via DocCheck login. 
Parameters: <code>$user_id</code> (int), <code>$user_data</code> (array)
</li>
<li>
<code>docacc_user_logged_in</code> — Fires when an existing user logs in via DocCheck. 
Parameters: <code>$user_id</code> (int), <code>$user_data</code> (array)
</li>
<li>
<code>docacc_session_created</code> — Fires when a user is authenticated in anonymous session mode. 
Parameters: <code>$user_data</code> (array)
</li>
</ul>
Filters
<ul>
<li>
<code>docacc_map_role</code> — Customize role assignment based on DocCheck user data. 
Parameters: <code>$current_role</code> (string), <code>$user_data</code> (array), <code>$user_id</code> (int) 
Note: roles with <code>manage_options</code> or <code>edit_others_posts</code> capabilities are silently rejected for security reasons.
</li>
<li>
<code>docacc_protected_template</code> — Override the template used for protected pages. 
Parameters: <code>$template</code> (string)
</li>
<li>
<code>docacc_is_authenticated</code> — Override the authentication check result. 
Parameters: <code>$authenticated</code> (bool)
</li>
<li>
<code>docacc_user_data</code> — Modify the DocCheck user data array before it is used. 
Parameters: <code>$user_data</code> (array)
</li>
</ul>
<h4>Template Functions</h4>
<pre><code>// Check if the current visitor is authenticated via DocCheck
docacc_is_authenticated(); // returns bool

// Get the authenticated user's DocCheck profile fields
docacc_get_user_data(); // returns array, empty if not authenticated
</code></pre>
Example in a theme template:
<pre><code><?php if ( docacc_is_authenticated() ) : ?>
 <div class="hcp-content">Visible only to DocCheck users.</div>
<?php else : ?>
 <?php echo do_shortcode( '[docacc_login]' ); ?>
<?php endif; ?>
</code></pre>
<h4>Custom Protected Page Template</h4>
Create <code>doccheck-protected.php</code> in your active theme directory — the plugin uses it automatically. Or override via filter:
<pre><code>add_filter( 'docacc_protected_template', function( $template ) {
 return get_stylesheet_directory() . '/my-protected-template.php';
} );
</code></pre>
<h4>User Metadata Stored</h4>
In WordPress User mode, the following meta fields are stored per user (subject to selected scopes):
<ul>
<li><code>docacc_unique_id</code> — DocCheck unique identifier (always stored)</li>
<li><code>docacc_profession</code> — Profession name</li>
<li><code>docacc_country</code> — Country ISO code</li>
<li><code>docacc_language</code> — Interface language</li>
<li><code>first_name</code>, <code>last_name</code> — Name fields</li>
<li><code>docacc_email</code> — Email address</li>
<li><code>docacc_discipline_name</code> — Medical discipline</li>
<li><code>docacc_activity_name</code> — Activity type</li>
<li><code>docacc_area_code</code>, <code>docacc_street</code>, <code>docacc_city</code>, <code>docacc_state</code> — Address fields</li>
<li><code>docacc_last_login</code> — Timestamp of last DocCheck login</li>
</ul>

Alternatives to DocCheck Access

Top alternatives