Curtiss Grymala

<p>This plugin allows WordPress to authenticate, authorize, create and update against an Active Directory domain. This plugin is based heavily on the <a href="https://wordpress.org/extend/plugins/active-directory-integration/" rel="ugc">Active Directory Integration</a> plugin, but has been modified to work with Multi Site and even Multi Network installations of WordPress.</p>
<p>Some of the features included in this plugin are:</p>
<ul>
<li>authenticate against more than one AD Server (for balanced load)</li>
<li>authorize users by Active Directory group memberships</li>
<li>auto create and update users that can authenticate against AD<br />
mapping of AD groups to WordPress roles</li>
<li>use TLS (or LDAPS) for secure communication to AD Servers (recommended)</li>
<li>use non standard port for communication to AD Servers</li>
<li>protection against brute force attacks</li>
<li>user and/or admin e-mail notification on failed login attempts</li>
<li>determine WP display name from AD attributes (sAMAccountName, displayName, description, SN, CN, givenName or mail)</li>
<li>enable/disable password changes for local (non AD) WP users</li>
<li>WordPress 3.0/3.1 compatibility, including Multi Site and Multi Network</li>
</ul>
<p>This plugin is based on <a href="https://wordpress.org/extend/plugins/active-directory-integration/" rel="ugc">glatze’s Active Directory Integration</a> plugin, which is based upon <a href="https://wordpress.org/extend/plugins/active-directory-authentication/" rel="ugc">Jonathan Marc Bearak’s Active Directory Authentication</a> plugin and <a href="http://adldap.sourceforge.net/" rel="nofollow ugc">Scott Barnett’s adLDAP</a>, a very useful PHP class.</p>
<p>Aside from the changes to make this plugin work more effectively with WordPress Multi Site, this version of the plugin also encrypts the password used to connect to the AD server when it is stored in the database.</p>
<p>This plugin was developed by <a href="https://wordpress.org/extend/plugins/profile/cgrymala" rel="ugc">Curtiss Grymala</a> for the <a href="http://umw.edu/" rel="nofollow ugc">University of Mary Washington</a>. It is licensed under the GPL2, which basically means you can take it, break it and change it any way you want, as long as the original credit and license information remains somewhere in the package.</p>
<h3>Important Notice</h3>
<p>Since I don’t currently have access to multiple AD servers, this plugin has only been tested on a single installation of WordPress with a single AD server. Therefore, it is entirely possible that there are major bugs.</p>
<p>At this time, I am seeking people to test the plugin, so please report any issues you encounter.</p>
<h3>Requirements</h3>
<ul>
<li>
<p>This plugin requires WordPress. It might work with versions older than 3.0, but it has not been tested with those.</p>
</li>
<li>
<p>This plugin also requires PHP5. Some attempt has been made to make it compatible with PHP4, but it has not been tested in that environment.</p>
</li>
<li>
<p>This plugin requires LDAP support to be compiled into PHP. If the <code>ldap_connect()</code> function is not available, this plugin will output an error message and will not do anything.</p>
</li>
</ul>
<h3>To Do</h3>
<ul>
<li>Add ability to validate against multiple AD servers (check one, then the other – rather than just load-balancing as the plugin currently does)</li>
<li>DONE as of 0.4a – Update admin interface to utilize native meta box interface rather than custom layout</li>
<li>DONE as of 0.3a – Separate the profile information from the role equivalent groups in the “auto update user” setting</li>
</ul>


Active Directory Authentication Integration

Allows WordPress to authenticate, authorize, create and update users through Active Directory

dreitierci

schakko

dreitier

tobi823

FatSquirrel

neosit

medan123

<p><em>Next Active Directory Integration</em> allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory. <em>NADI</em> ist a complete rewrite of its predecessor Active Directory Integration and therefore an own plugin.<br />
You can easily import users from your Active Directory into your WordPress instance and keep both synchronized through <em>Next Active Directory Integration’s</em> features.</p>
<p>Even if <em>NADI</em> is available for free we hope you purchase a plan to let us continue the work on Next Active Directory Integration.<br />
You can purchase commercial support plans at <a href="https://www.active-directory-wp.com/shop-overview/" rel="nofollow ugc">https://www.active-directory-wp.com/shop-overview/</a>. The support plans give you access to our premium extensions and guarantee an ongoing development of the plug-in.</p>
<h4>Features</h4>
<ul>
<li>Authenticating WordPress users against one or multiple AD Server</li>
<li>Authorizing users by Active Directory group memberships</li>
<li>Managing Active Directory authentication for WordPress Multisite installations</li>
<li>Single Sign On with Kerberos sponsored by <a href="http://colt.net" rel="nofollow ugc">Colt Technology Services</a> and <a href="https://app.digitalelite.co.uk/" rel="nofollow ugc">Digital Elite</a></li>
<li>Automatically create and update WordPress users based upon their Active Directory membership</li>
<li>Mapping of Active Directory security groups to WordPress roles</li>
<li>Protection against brute force password hacking attacks</li>
<li>User and/or admin e-mail notification on failed login attempts</li>
<li>Multi-language support (at the moment only English is included)</li>
<li>Determining WordPress display name from Active Directory attributes</li>
<li>Synchronizing Active Directory attributes and WordPress user meta information in both ways</li>
<li>Embed customized Active Directory attributes in WordPress user’s profile</li>
<li>Enable/disable password changes for local (non-Active Directory) WordPress users</li>
<li>Disable user accounts in WordPress if they are disabled in Active Directory.</li>
<li>Set users local WordPress password on first and/or on every successful login</li>
<li>Option to disable fallback to local (WordPress) authentication.</li>
<li>Support for Active Directory forest environments.</li>
<li>and much much more</li>
</ul>
<h4>Premium Extensions</h4>
<p>As an owner of a valid support plan you have access to the following premium extensions:</p>
<ul>
<li>Profile Pictures: Synchronize profile photos from Active Directory to WordPress without a 3rd party plug-in</li>
<li>BuddyPress profile photo: Synchronize profile photos from Active Directory to BuddyPress</li>
<li>Buddy Press simple attributes: Synchronize attributes from Active Directory/NADI to BuddyPress’ custom profiles</li>
<li>Login with Ultimate Member: Let UM users log in by using NADI</li>
<li>Login with WooCommerce: Let WooCommerce users log in by using NADI</li>
<li>WP-CLI: Execute common NADI tasks (Sync to WordPress, Sync to AD) with help of WP-CLI</li>
<li>Active Directory Forest: Be able to use one WordPress instance with your whole Active Directory forest environment</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress since 5.6</li>
<li>PHP >= 8.1</li>
<li>LDAP support</li>
<li>OpenSSL Support for TLS (recommended)</li>
</ul>


Next Active Directory Integration

I had some issues finding out how to configure it correctly. I usually login with "INTERN\john.doe", but a format like this was not valid. I found out that I had to use "john.doe@intern.example.com" and to add the two suffixes "@intern.example.com" as well as "@example.com". I activated the automatic user creation and all worked easily. Awesome work!

Once you figure out your configuration, it work perfectly!

Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory.

Active Directory Authentication Integration vs Next Active Directory Integration