logto

<p>Thank you for choosing <a href="https://logto.io/?ref=wpp" rel="nofollow ugc">Logto</a>! By integrating Logto into your WordPress site, you are not only enhancing the security and user experience of your site, but also enabling a unified login experience across all your applications.</p>
<h3>Why Logto?</h3>
<p>Logto is an open-source Auth0 alternative and a modern authentication and authorization solution for all your applications, including your WordPress sites. With Logto, you can:</p>
<ul>
<li>Enable passwordless login, social login, single sign-on (SSO), and multi-factor authentication (MFA) for your WordPress site.</li>
<li>Use role-based access control (RBAC) to manage user permissions.</li>
<li>Support generic OAuth2, OpenID Connect, and SAML protocols.</li>
<li>Customize the login and registration pages to match your brand.</li>
</ul>
<p>In addition, Logto offers dozens of out-of-the-box integrations with popular social login providers, including Google, GitHub, Entra ID (Azure AD), Facebook, and more. Check out the <a href="https://docs.logto.io/integrations" rel="nofollow ugc">full list of built-in integrations and social login providers</a>.</p>
<h3>Get started</h3>
<p>If you are new to Logto, we recommend checking out our <a href="https://docs.logto.io/" rel="nofollow ugc">introduction page</a> to have a quick overview of Logto concepts and features.</p>
<p>If you are looking for a step-by-step guide to set up Logto, please refer to our <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">WordPress plugin quick start guide</a>.</p>
<p>If you have any questions or feedback, please feel free to:</p>
<ul>
<li><a href="https://discord.com/invite/UEPaF3j5e6" rel="nofollow ugc">Join our Discord server</a> to get help from the community.</li>
<li><a href="https://github.com/logto-io/wordpress/issues" rel="nofollow ugc">Open an issue on GitHub</a> to report bugs or request features.</li>
<li><a href="https://logto.io/" rel="nofollow ugc">Subscribe to a paid plan</a> to get access to official support and more features.</li>
</ul>
<h3>From WordPress admin panel</h3>
<ol>
<li>Go to <strong>Plugins</strong> > <strong>Add New</strong>.</li>
<li>Search for “Logto”.</li>
<li>Click <strong>Install Now</strong>.</li>
<li>Click <strong>Activate</strong>.</li>
<li>Go to <strong>Settings</strong> > <strong>Logto</strong> to configure the plugin.</li>
<li>Follow the <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">quick start guide</a> to set up Logto.</li>
</ol>
<h3>From WordPress.org</h3>
<ol>
<li>Search for “Logto” in the <a href="https://wordpress.org/plugins/" rel="ugc">WordPress.org plugin directory</a>.</li>
<li>Download the plugin ZIP file.</li>
<li>Go to <strong>Plugins</strong> > <strong>Add New</strong> in your WordPress admin panel.</li>
<li>Click <strong>Upload Plugin</strong>.</li>
<li>Select the downloaded ZIP file and click <strong>Install Now</strong>.</li>
<li>Click <strong>Activate</strong>.</li>
<li>Go to <strong>Settings</strong> > <strong>Logto</strong> to configure the plugin.</li>
<li>Follow the <a href="https://docs.logto.io/quick-start/wordpress-plugin" rel="nofollow ugc">quick start guide</a> to set up Logto.</li>
</ol>


Logto – User Authentication and Authorization

Enable beautiful and secure user authentication, including passwordless, social login, single sign-on, multi-factor authentication (MFA), and more.

Automattic

WordPress.org

Alex Kirk

Ashish Kumar (Ashfame)

Paulo Pinto

<p>With this plugin you can use your own WordPress install to authenticate with a webservice that provides <a href="https://openid.net/connect/" rel="nofollow ugc">OpenID Connect</a> to implement Single-Sign On (SSO) for your users.</p>
<p>The plugin is currently only configured using constants and hooks as follows:</p>
<h3>Define the RSA keys</h3>
<p>If you don’t have keys that you want to use yet, generate them using these commands:</p>
<pre><code>openssl genrsa -out oidc.key 4096
openssl rsa -in oidc.key -pubout -out public.key
</code></pre>
<p>And make them available to the plugin as follows (this needs to be added before WordPress loads):</p>
<pre><code>define( 'OIDC_PUBLIC_KEY', <<<OIDC_PUBLIC_KEY
-----BEGIN PUBLIC KEY-----
...
-----END PUBLIC KEY-----
OIDC_PUBLIC_KEY
);

define( 'OIDC_PRIVATE_KEY', <<<OIDC_PRIVATE_KEY
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
OIDC_PRIVATE_KEY
);
</code></pre>
<p>Alternatively, you can also put them outside the webroot and load them from the files like this:</p>
<pre><code>define( 'OIDC_PUBLIC_KEY', file_get_contents( '/web-inaccessible/oidc.key' ) );
define( 'OIDC_PRIVATE_KEY', file_get_contents( '/web-inaccessible/private.key' ) );
</code></pre>
<h3>Define the clients</h3>
<p>Define your clients by adding a filter to <code>oidc_registered_clients</code> in a separate plugin file or <code>functions.php</code> of your theme or in a MU-plugin like:</p>
<pre><code>add_filter( 'oidc_registered_clients', 'my_oidc_clients' );
function my_oidc_clients() {
    return array(
        'client_id_random_string' => array(
            'name' => 'The name of the Client',
            'secret' => 'a secret string',
            'redirect_uri' => 'https://example.com/redirect.uri',
            'grant_types' => array( 'authorization_code' ),
            'scope' => 'openid profile',
        ),
    );
}
</code></pre>
<h3>Exclude URL from caching</h3>
<ul>
<li><code>example.com/wp-json/openid-connect/userinfo</code>: We implement caching exclusion measures for this endpoint by setting <code>Cache-Control: 'no-cache'</code> headers and defining the <code>DONOTCACHEPAGE</code> constant. If you have a unique caching configuration, please ensure that you manually exclude this URL from caching.</li>
</ul>
<h3>Github Repo</h3>
<p>You can report any issues you encounter directly on <a href="https://github.com/Automattic/wp-openid-connect-server" rel="nofollow ugc">Github repo: Automattic/wp-openid-connect-server</a></p>


OpenID Connect Server

Use OpenID Connect to log in to other webservices using your own WordPress.

Logto – User Authentication and Authorization vs OpenID Connect Server