Auth0

evansims

Josh C

This plugin replaces standard WordPress login forms with one powered by <a href="https://auth0.com" rel="nofollow ugc">Auth0</a> that enables:
<ul>
<li>Universal authentication
<ul>
<li>Over 30 social login providers</li>
<li>Enterprise connections (ADFS, Active Directory / LDAP, SAML, Office 365, Google Apps and more)</li>
<li>Connect your own database</li>
<li>Passwordless connections (using email or SMS)</li>
</ul>
</li>
<li>Ultra secure
<ul>
<li>Multifactor authentication</li>
<li>Password policies</li>
<li>Email validation</li>
<li>Mitigate brute force attacks</li>
</ul>
</li>
</ul>
<h3>Technical Notes</h3>
IMPORTANT: By using this plugin you are delegating the site authentication and profile handling to Auth0. That means that you won’t be using the WordPress database to authenticate users and the default WordPress login forms will be replaced.
Please see our <a href="https://auth0.com/docs/cms/wordpress/how-does-it-work" rel="nofollow ugc">How It Works page</a> for more information on how Auth0 authenticates and manages your users.
<h4>Migrating Existing Users</h4>
Auth0 allows multiple authentication providers. You can have social providers like Facebook, Twitter, Google+, and more, a database of users and passwords (just like WordPress but hosted in Auth0), or you can use an Enterprise directory like Active Directory, LDAP, Office365, Google Apps, or SAML. All those authentication providers might give you an email and a flag indicating whether the email was verified or not. We use that email (only if it is verified) to associate a previous existing user with the one coming from Auth0.
If the email was not verified and there is an account with that email in WordPress, the user will be presented with a page saying that the email was not verified and a link to “Re-send the verification email.” For either scenario, you can choose whether it is mandatory that the user has a verified email or not in the plugin settings.
Please note: In order for a user to log in using Auth0, they will need to sign up via the Auth0 login form (or have an account created for them in Auth0). Once signup is complete, their Auth0 user will be automatically associated with their WordPress user.
<h4>Widget</h4>
You can enable Auth0 as a WordPress widget in order to show it in a sidebar. The widget inherits the main plugin settings but can be overridden with its own settings in the widget form. Note: this form will not display for logged-in users.
<h4>Shortcode</h4>
Also, you can use the Auth0 widget as a shortcode in your editor. Just add the following to use the global settings:
<pre><code>[auth0]
</code></pre>
Like widgets, shortcode login forms will use the settings of the plugin. It can be customized by adding the following attributes:
<ul>
<li><code>icon_url</code> – A direct URL to an image used at the top of the login form</li>
<li><code>form_title</code> – Text to appear at the top of the login form</li>
<li><code>gravatar</code> – Display the user’s Gravatar; set to <code>1</code> for yes</li>
<li><code>redirect_to</code> – A direct URL to use after successful login</li>
<li><code>dict</code> – Valid JSON to override form text (<a href="https://github.com/auth0/lock/blob/master/src/i18n/en.js" rel="nofollow ugc">see options here</a>)</li>
<li><code>extra_conf</code> – Valid JSON to override Lock configuration (<a href="https://auth0.com/docs/libraries/lock/v11/configuration" rel="nofollow ugc">see options here</a>)</li>
<li><code>show_as_modal</code> – Display a button that triggers the login form in a modal; set to <code>1</code> for yes</li>
<li><code>modal_trigger_name</code> – Button text to display when using a modal</li>
</ul>
Example:
<pre><code>[auth0 show_as_modal="1" modal_trigger_name="Login button: This text is configurable!"]
</code></pre>
Note: this form will not display for logged-in users.

Login by Auth0

Does the latest version of plugin use the Lock 10 or Later version of the Lock API?

Please do let me know your inputs about the same.

Thanks

Does updated the plugin used Lock 10 or Later?


Unfortunately, plugin doesn't work and abandoned. On official Github repository you can find this text: 




v4 of the plugin is no longer supported as of June 2023. We are no longer providing new features or bugfixes for that release. Please upgrade to v5 as soon as possible.
OAuth0 Github



But irony that v5 doesn't work as well, so both versions of plugin are just a waste of time


Doesn't work, abandoned

Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites.

This plugin activates easy self-service two-factor (or multi-factor) authentication logins for you and all your users.
CryptoPhoto is the world’s easiest-to-use, fastest, and most secure two-factor (and optionally multi-factor) authentication. Logins are usually as fast and easy as “one tap”, and no training is needed.
After installation, users will see a new “CryptoPhoto” dashboard menu item, which they can use themselves to activate and download printable tokens, or install the CryptoPhoto app to connect their smartphones or tablets (iOS, Android, WindowsPhone, and Blackberry).
Our user-experience testing was conducted using year-1 schoolchildren. They all successfully logged in without us giving them any instructions. CryptoPhoto is way easier to use, than it is to describe – but here’s how it works anyway:
After users activate CryptoPhoto, they will see a photo during their logins, and at the same time, their phone (or tablet) will beep and show them a collection of photos too. (if they don’t have any smart devices, or have lost their phone, they use their downloaded paper token instead). To complete their login, they simply tap the one on their phone that matches the login one (or type the codes if they don’t have a phone, or don’t have mobile coverage). This is why CryptoPhoto is currently the worlds most secure two-factor-authentication – the photos create “mutual authentication” (which blocks phishing and Man-in-the-middle MitM attacks) – nobody else does this.
CryptoPhoto also combats malware, viruses, advanced-persistent-threats (APT’s), trojans, keyloggers, phishing and spoof/impostor/fake websites, vishing (telephone phishing), shoulder-surfing attacks, careless password choices by end users, password re-use problems (eg: passwords stolen from other web sites won’t compromise CryptoPhoto users), confidence tricks, and more: we simultaneously protect our users against more threats than any competing solution (and, in fact, against more threats than all competing solutions combined).
CryptoPhoto works with or without smartphones/tablets, works home and abroad, online and offline, and keeps working (securely) even when users loose their phones/tablets. CryptoPhoto is the industries lowest-support-required two-factor-authentication solution: you do not need to hire a support team to mange users enrollments and issues (like bypasses and re-enrollment when users loose their phones/tokens).
To securely install the CryptoPhoto plugin, you will have to follow some steps to generate unique keys for your installation etc. The steps are on in our <a href="https://cryptophoto.com/info/admin" rel="nofollow ugc">Cryptophoto Installation guide</a> if you need help, or have comments/suggestions/criticism, please email us or visit <a href="https://cryptophoto.com/help" rel="nofollow ugc">CryptoPhoto Support page</a>, or feel free to call any time on skype:chrisdrake if you want one-to-one help with anything.
For more information, please visit the <a href="http://cryptophoto.com" rel="nofollow ugc">CryptoPhoto site</a>

CryptoPhoto

This plugin activates easy self-service two-factor (or multi-factor) authentication logins for you and all your users.

Login by Auth0 vs CryptoPhoto