kanru

Enable Cloudflare Access self-hosted application to protect your <code>/wp-admin</code> folder. Add your auth domain and aud settings from Cloudflare Access. Authenticated user will be automatically logined to WordPress if their email address matches.
Follow <a href="https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/self-hosted-apps/" rel="nofollow ugc">Cloudflare document</a> to setup Access.
You can also define configs in <code>wp-config.php</code>
<pre><code>define('WP_CF_ACCESS_AUTH_DOMAIN', 'yourdomain.cloudflareaccess.com');
define('WP_CF_ACCESS_JWT_AUD', 'examplef2nat0rkar2866wn829a0x2ztdg');
define('WP_CF_ACCESS_REDIRECT_LOGIN', true);
</code></pre>
This plugin is not affiliated with nor developed by Cloudflare. All trademarks, service marks and company names are the property of their respective owners.

Auto Login with Cloudflare

I am testing this plugin, I think Jetpack's secure login feature can be replaced with this plugin, this means I can remove Jetpack after my testing is done.

Good job, thank you so much.

Great Auth plugin

Clean, simple, and precisely what it promises.

I just configured my complete setup using Cloudflare Access with auth via AzureAD and auto-login to wp-admin. This plugin is gold!

Combined with the Authenticated Origin Pulls feature of CF, this is seamlessly intertwined enterprise-level security for free.

I love this! Thank you!

Super simple way to allow a single sign on to your Wordpress site when using Cloudflare Access.

seschi98

This plugin allows signing in users via JSON Web Token (JWT) in WordPress. It is used to allow users from another website/service/etc. to securely use their credentials for the WordPress site. 
Sample use case: There is an existing user database (e.g. in an intranet environment) and the users should be able to login to an external site that is powered by wordpress, without having to remember another password. This mechanism is also called Single Sign On (SSO). 
Please note that the user information and role mappings are updated each time the user logs in via SSO. If you do not want to sync the roles from your existing system to wordpress, you can disable the functionality via the settings page.
<h3>JWT Server</h3>
You will need to implement an endpoint on your website/app that has access to the logged 
in user (via login form or Kerberos-like authentication etc). That endpoint needs to create 
and sign a JWT with the HS256 algorithm and the below described information in the payload. 
It then has to redirect the user back to the WordPress site <code>https://example.org/?auth=jwt&code={jwt}</code> 
where <code>{jwt}</code> is the signed JWT as string representation.
{ 
 “iat”: 1516239022, 
 “iss”: “issuer_name”, 
 “user_info”: { 
 “user_login”: “johndoe”, 
 “user_name”: “John Doe”, 
 “first_name”: “John”, 
 “last_name”: “Doe”, 
 “user_email”: “johndoe@example.org”, 
 “user_roles”: [“role1”] 
 } 
}

JWT Single Sign On

This plugin allows signing in users via JSON Web Token (JWT) in Wordpress. It is used to allow users from another website/service/etc.

Auto Login with Cloudflare vs JWT Single Sign On