Paul Ryan

jojaba

the_elusive

Anil Natha

pkarjala

Eduardo Larequi

<p><em>Authorizer</em> restricts access to a WordPress site to specific users, typically students enrolled in a university course. It maintains a list of approved users that you can edit to determine who has access. It also replaces the default WordPress login/authorization system with one relying on an external server, such as Google, CAS, LDAP, or an OAuth2 provider. Finally, <em>Authorizer</em> lets you limit invalid login attempts to prevent bots from compromising your users’ accounts.</p>
<p>View or contribute to the plugin source on GitHub: <a href="https://github.com/uhm-coe/authorizer" rel="nofollow ugc">https://github.com/uhm-coe/authorizer</a></p>
<p><em>Authorizer</em> requires the following:</p>
<ul>
<li><strong>CAS server</strong> (2.x, 3.x, 4.x, 5.x, 6.x, or 7.x) or <strong>LDAP server</strong> (plugin needs the URL)</li>
<li>PHP extensions: php-ldap, php-curl, php-dom</li>
</ul>
<p><em>Authorizer</em> provides the following options:</p>
<ul>
<li><strong>Authentication</strong>: WordPress accounts; Google accounts; CAS accounts; LDAP accounts; OAuth2 accounts</li>
<li><strong>Login Access</strong>: All authenticated users (all local and all external can log in); Only specific users (all local and approved external users can log in)</li>
<li><strong>View Access</strong>: Everyone (open access); Only logged in users</li>
<li><strong>Limit Login Attempts</strong>: Progressively increase the amount of time required between invalid login attempts.</li>
<li><strong>Shortcode</strong>: Use the <code>[authorizer_login_form]</code> shortcode to embed a wp_login_form() outside of wp-login.php.</li>
</ul>


Authorizer

Integrates nicely with Google hosted domain/s. Couldn't be happier with how it works!

Integrates well with Google Logins

I've experimented this plugin on a multisite and everything works pretty well.

Works great even on a multisite setup

Authorizer limits login attempts, restricts access to specific users, and authenticates against external sources (OAuth2, Google, LDAP, or CAS).

Luis Rodrigues

<p>Cassava allows WordPress to act as a single sign-on authenticator using the Central Authentication Service (CAS) protocol.</p>
<p>That way, users on your WordPress install may be able to access different applications that support the CAS protocol by providing a single set of credentials and without exposing the user’s password.</p>
<p>By default, CAS method URIs are provided under the <code>wp-cas</code> endpoint:</p>
<ul>
<li><code>/wp-cas/login</code>: Allows a remote service to request that a user authenticate on the CAS server. Will redirect back to the remote service along with a service ticket.</li>
<li><code>/wp-cas/logout</code>: Terminates the single sign-on session. May optionally redirect the user back to the remote service.</li>
<li><code>/wp-cas/validate</code> [CAS 1.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns a plaintext response.</li>
<li><code>/wp-cas/proxy</code> [CAS 2.0]: Provides access to remote services with proxy tickets in exchange for proxy-granting tickets. Returns an XML response.</li>
<li><code>/wp-cas/proxyValidate</code> [CAS 2.0]: Allows a remote service to validate a service or proxy ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/serviceValidate</code> [CAS 2.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/p3/proxyValidate</code> [CAS 3.0]: Allows a remote service to validate a service or proxy ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/p3/serviceValidate</code> [CAS 3.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns an XML response.</li>
</ul>
<p>There are a few <a href="http://www.jasig.org/cas/client-integration" rel="nofollow ugc">client integration</a> libraries available for CAS, as well as a handy guide for <a href="https://wiki.jasig.org/display/CASC/CASifying+Applications" rel="nofollow ugc">CASifying several existing applications</a>. Independent WordPress installations may integrate with Cassava using a client plugin such as <a href="https://wordpress.org/plugins/cas-maestro/" rel="ugc">CAS Maestro</a>.</p>
<p>Please follow and contribute to Cassava’s development on <a href="https://github.com/goblindegook/wp-cas-server" rel="nofollow ugc">Github</a>.</p>
<h3>Hooks</h3>
<h4>Action: cas_server_before_request</h4>
<p>Fires before a CAS request is processed.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Action: cas_server_after_request</h4>
<p>Fires after a CAS request is processed.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Action: cas_server_error</h4>
<p>Fires if the CAS server has to return an XML error.</p>
<p>Parameters:</p>
<ul>
<li><em>WP_Error</em> <code>$error</code>: WordPress error to return as XML.</li>
</ul>
<h4>Action: cas_server_validation_success</h4>
<p>Fires on successful ticket validation.</p>
<p>Parameters:</p>
<ul>
<li><em>WP_User</em> <code>$user</code>: WordPress user validated by ticket.</li>
<li><em>string</em> <code>$ticket</code>: Valid ticket string.</li>
</ul>
<h4>Filter: cas_enabled</h4>
<p>Allows developers to disable CAS.</p>
<p>Parameters:</p>
<ul>
<li><em>boolean</em> <code>$cas_enabled</code>: Whether the server should respond to single sign-on requests.</li>
</ul>
<h4>Filter: cas_server_routes</h4>
<p>Allows developers to override the default controller mapping, define additional endpoints and provide alternative implementations to the provided controllers.</p>
<p>Controllers provided in this fashion should extend the <code>\Cassava\CAS\Controller\BaseController</code> class.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$cas_routes</code>: CAS endpoint to controller mapping.</li>
</ul>
<h4>Filter: cas_server_response</h4>
<p>Lets developers change the CAS server response string.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$output</code>: Response output string.</li>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Filter: cas_server_dispatch_args</h4>
<p>Filters the callback arguments to be dispatched for the request. Plugin developers may return a <code>WP_Error</code> object here to abort the request.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$args</code>: Arguments to pass the callback.</li>
<li><em>(string|array)</em> <code>$callback</code>: Callback function or method.</li>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Filter: cas_server_login_args</h4>
<p>Allows developers to change the request parameters passed to a <code>/login</code> request.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$args</code>: HTTP request (GET, POST) parameters.</li>
</ul>
<h4>Filter: cas_server_redirect_service</h4>
<p>Filters the redirect URI for the service requesting user authentication.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$service</code>: Service URI requesting user authentication.</li>
<li><em>WP_User</em> <code>$user</code>: Logged in WordPress user.</li>
</ul>
<h4>Filter: cas_server_custom_auth_uri</h4>
<p>Allows developers to redirect the user to a custom login form.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$custom_login_url</code>: URI for the custom login page.</li>
<li><em>array</em> <code>$args</code>: Login request parameters.</li>
</ul>
<h4>Filter: cas_server_ticket_expiration</h4>
<p>This filter allows developers to override the default ticket expiration period.</p>
<p>Parameters:</p>
<ul>
<li><em>int</em> <code>$expiration</code>: Ticket expiration period (in seconds).</li>
<li><em>string</em> <code>$type</code>: Type of ticket to set.</li>
<li><em>WP_User</em> <code>$user</code>: Authenticated user associated with the ticket.</li>
</ul>
<h4>Filter: cas_server_validation_user_attributes</h4>
<p>Allows developers to change the list of (key, value) pairs before they’re included in a <code>/serviceValidate</code> response.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$attributes</code>: List of attributes to output.</li>
<li><em>WP_User</em> <code>$user</code>: Authenticated user.</li>
</ul>
<h4>Filter: cas_server_settings_user_attribute_options</h4>
<p>Allows developers to change the list of user attributes that appear in the dashboard for an administrator to set to return on successful validation requests.</p>
<p>Options are stored in an associative array, with user attribute slugs as array keys and option labels as array values.</p>
<p>These settings are valid only for CAS 2.0 validation requests.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$attributeOptions</code> Attribute options an administrator can set on the dashboard.</li>
</ul>


Cassava CAS Server

Cassava provides authentication services based on the Jasig CAS protocol.

Authorizer vs Cassava CAS Server