logto

<p>Thank you for choosing <a href="https://logto.io/?ref=wpp" rel="nofollow ugc">Logto</a>! By integrating Logto into your WordPress site, you are not only enhancing the security and user experience of your site, but also enabling a unified login experience across all your applications.</p>
<h3>Why Logto?</h3>
<p>Logto is an open-source Auth0 alternative and a modern authentication and authorization solution for all your applications, including your WordPress sites. With Logto, you can:</p>
<ul>
<li>Enable passwordless login, social login, single sign-on (SSO), and multi-factor authentication (MFA) for your WordPress site.</li>
<li>Use role-based access control (RBAC) to manage user permissions.</li>
<li>Support generic OAuth2, OpenID Connect, and SAML protocols.</li>
<li>Customize the login and registration pages to match your brand.</li>
</ul>
<p>In addition, Logto offers dozens of out-of-the-box integrations with popular social login providers, including Google, GitHub, Entra ID (Azure AD), Facebook, and more. Check out the <a href="https://docs.logto.io/integrations" rel="nofollow ugc">full list of built-in integrations and social login providers</a>.</p>
<h3>Get started</h3>
<p>If you are new to Logto, we recommend checking out our <a href="https://docs.logto.io/" rel="nofollow ugc">introduction page</a> to have a quick overview of Logto concepts and features.</p>
<p>If you are looking for a step-by-step guide to set up Logto, please refer to our <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">WordPress plugin quick start guide</a>.</p>
<p>If you have any questions or feedback, please feel free to:</p>
<ul>
<li><a href="https://discord.com/invite/UEPaF3j5e6" rel="nofollow ugc">Join our Discord server</a> to get help from the community.</li>
<li><a href="https://github.com/logto-io/wordpress/issues" rel="nofollow ugc">Open an issue on GitHub</a> to report bugs or request features.</li>
<li><a href="https://logto.io/" rel="nofollow ugc">Subscribe to a paid plan</a> to get access to official support and more features.</li>
</ul>
<h3>From WordPress admin panel</h3>
<ol>
<li>Go to <strong>Plugins</strong> > <strong>Add New</strong>.</li>
<li>Search for “Logto”.</li>
<li>Click <strong>Install Now</strong>.</li>
<li>Click <strong>Activate</strong>.</li>
<li>Go to <strong>Settings</strong> > <strong>Logto</strong> to configure the plugin.</li>
<li>Follow the <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">quick start guide</a> to set up Logto.</li>
</ol>
<h3>From WordPress.org</h3>
<ol>
<li>Search for “Logto” in the <a href="https://wordpress.org/plugins/" rel="ugc">WordPress.org plugin directory</a>.</li>
<li>Download the plugin ZIP file.</li>
<li>Go to <strong>Plugins</strong> > <strong>Add New</strong> in your WordPress admin panel.</li>
<li>Click <strong>Upload Plugin</strong>.</li>
<li>Select the downloaded ZIP file and click <strong>Install Now</strong>.</li>
<li>Click <strong>Activate</strong>.</li>
<li>Go to <strong>Settings</strong> > <strong>Logto</strong> to configure the plugin.</li>
<li>Follow the <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">quick start guide</a> to set up Logto.</li>
</ol>


Logto – User Authentication and Authorization

Enable beautiful and secure user authentication, including passwordless, social login, single sign-on, multi-factor authentication (MFA), and more.

jfwenisch

<p>Keystone OIDC transforms your WordPress installation into a fully-featured <strong>OpenID Connect (OIDC) identity provider</strong>, allowing other applications to authenticate users via your WordPress user database.</p>
<h4>Key Features</h4>
<ul>
<li><strong>OIDC Authorization Code Flow</strong> with PKCE support</li>
<li><strong>RS256 JWT</strong> signed access tokens and ID tokens</li>
<li><strong>Admin UI</strong> to create and manage multiple OIDC clients</li>
<li><strong>Client secret management</strong> – generate and reset secrets securely (shown only once)</li>
<li><strong>OIDC Discovery</strong> endpoint (<code>/wenisch-tech/keystone-oidc/.well-known/openid-configuration</code>) for automatic client configuration</li>
<li><strong>Standard scopes</strong>: <code>openid</code>, <code>profile</code>, <code>email</code></li>
<li><strong>Refresh tokens</strong> for long-lived sessions</li>
<li><strong>Zero additional configuration</strong> after install – just create a client and you’re ready</li>
</ul>
<h4>Quick Start</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Go to <strong>OIDC Provider <span aria-hidden="true" class="wp-exclude-emoji">→</span> Add Client</strong> in your WordPress admin</li>
<li>Enter your application name and redirect URI(s)</li>
<li>Copy the generated <strong>Client ID</strong> and <strong>Client Secret</strong> (shown once)</li>
<li>Configure your OIDC client application with the discovery URL shown in the settings</li>
</ol>
<h4>Endpoints</h4>
<p>All URLs are relative to your WordPress site root.</p>
<ul>
<li><strong>Discovery:</strong> <code>/wenisch-tech/keystone-oidc/.well-known/openid-configuration</code></li>
<li><strong>Authorization:</strong> <code>/wenisch-tech/keystone-oidc/oauth/authorize</code></li>
<li><strong>Token:</strong> <code>/wenisch-tech/keystone-oidc/oauth/token</code></li>
<li><strong>UserInfo:</strong> <code>/wenisch-tech/keystone-oidc/oauth/userinfo</code></li>
<li><strong>JWKS:</strong> <code>/wenisch-tech/keystone-oidc/oauth/jwks</code></li>
</ul>
<p>Compatibility aliases are also routed under <code>/wenisch-tech/keystone-oidc/protocol/openid-connect/*</code> for clients that still derive Keycloak-style paths from the custom issuer URI. These aliases are not advertised in discovery.</p>
<h4>UserInfo Example</h4>
<p>For <code>openid profile email</code>, <code>/wenisch-tech/keystone-oidc/oauth/userinfo</code> returns:</p>
<pre><code>{
  "sub": "42",
  "name": "Jane Doe",
  "given_name": "Jane",
  "family_name": "Doe",
  "preferred_username": "jane",
  "email": "jane@example.com",
  "email_verified": true
}

sub is the WordPress user ID as a string, `preferred_username` is the WordPress `user_login`, and `email` is the WordPress `user_email`.
</code></pre>
<p>Roles are not currently emitted. The plugin does not expose WordPress roles or capabilities in UserInfo or ID tokens.</p>
<h3>[2.3.0](https://github.com/wenisch-tech/wordpress-keystone-oidc/compare/v2.2.2…v2.3.0) (2026-06-14)</h3>
<h3>Features</h3>
<ul>
<li>consent-screen now uses theme default colors if available (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/24beefead5ac2fab30e0945c58af3f009a733c1c" rel="nofollow ugc">24beefe</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>ensure compability with wordpress v7 (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/36f0d5040ee72d8f2ad9b76ff07da25ed5649bce" rel="nofollow ugc">36f0d50</a>)</li>
</ul>
<h4>2.2.2</h4>
<p>Released on 2026-06-12.</p>
<h4>Bug Fixes</h4>
<ul>
<li>updated release versioning and changelog creation (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/98cfb3062232f96346646f915a90198f69b17f51" rel="nofollow ugc">98cfb30</a>)</li>
<li>updated repository links (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/f46b2b6f2012cd348eab5e73f5ca9410f0efc406" rel="nofollow ugc">f46b2b6</a>)</li>
<li>updatet generation of changelog. (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/357bded5f6cd824859dfc4710d72bdbec60da983" rel="nofollow ugc">357bded</a>)</li>
</ul>
<h4>Documentation</h4>
<ul>
<li>added “Report a bug” button to plugin page (<a href="https://github.com/wenisch-tech/wordpress-keystone-oidc/commit/8281f6c5cfd9474e785c06eaf562e1a2cb84f47d" rel="nofollow ugc">8281f6c</a>)</li>
</ul>
<h4>1.0.0</h4>
<ul>
<li>Initial release</li>
<li>Authorization Code Flow with PKCE</li>
<li>RS256 JWT tokens</li>
<li>Multi-client admin UI with secret management</li>
<li>OIDC Discovery endpoint</li>
<li>Refresh token support</li>
</ul>


Keystone OIDC

Turn your WordPress site into an OpenID Connect (OIDC) identity provider. Manage clients through a simple admin panel.

Logto – User Authentication and Authorization vs Keystone OIDC