Digitaldive

WP OAuth2 adds “Login with WordPress.com” (OAuth2) to your WordPress login screen and a connect/disconnect widget on user profile pages. It’s designed for agencies and teams managing multiple sites who want a consistent WordPress.com login without installing Jetpack.
External Service: WordPress.com OAuth2 API 
– Service purpose: Authenticate users with their WordPress.com accounts. 
– Data sent: Client ID, redirect URI, OAuth authorization code, and standard HTTP request metadata during the OAuth flow. 
– Data received: WordPress.com user ID, email, and display name to link or create WordPress users. 
– Service terms: https://wordpress.com/tos/ 
– Privacy policy: https://automattic.com/privacy/
Features:
<ul>
<li>WordPress.com login (OAuth2 “auth” scope).</li>
<li>Link or unlink WordPress users to WordPress.com accounts.</li>
<li>Auto-create users when no matching email exists (optional).</li>
<li>Allowlist by email domain or WordPress.com user ID (optional).</li>
<li>Audit log of the last 20 OAuth attempts (optional).</li>
<li>Stores only WordPress.com user ID in user meta (no access tokens stored).</li>
<li>Short-lived OAuth state with HttpOnly cookie + transient for CSRF protection.</li>
</ul>
Setup requires creating a WordPress.com application and adding the redirect URI shown in the plugin settings. Feature toggles let you enable or disable the login button, profile widget, auto-create users, admin notices, allowlists, and the audit log.
<h3>Privacy</h3>
This plugin connects to WordPress.com to authenticate users. It stores the WordPress.com user ID in WordPress user meta to link accounts. OAuth access tokens are used during the login flow and are not stored. A short-lived HttpOnly cookie and transient are used for OAuth state validation and expire automatically. If the audit log is enabled, the last 20 OAuth attempts are stored (time, status, IP address, and basic details) in a non-autoloaded option. WordPress.com service terms: https://wordpress.com/tos/ and privacy policy: https://automattic.com/privacy/.

OAuth2 Account Login

Add WordPress.com OAuth2 login to WordPress. Let teams sign in with WordPress.com, link accounts, and avoid Jetpack. Not affiliated with Automattic.

Jonathan Daggerhart

Tim Nolte

This plugin allows to authenticate users against OpenID Connect OAuth2 API with Authorization Code Flow. 
Once installed, it can be configured to automatically authenticate users (SSO), or provide a “Login with OpenID Connect” 
button on the login form. After consent has been obtained, an existing user is automatically logged into WordPress, while 
new users are created in WordPress database.
Much of the documentation can be found on the Settings > OpenID Connect Generic dashboard page.
Please submit issues to the Github repo: https://github.com/oidc-wp/openid-connect-generic

OpenID Connect Generic Client

Just works

Thanks for this awesome plugin.

Thanks to the filter openid-connect-generic-user-creation-test we were even able to automatically merge existing wordpress users with existing users of our SSO system without allowing the other SSO users to be able to create a wordpress account.

Perfect


Every other plugin is simply a trap to get you paying a premium version. 



This one simply works as expected, with no bloatware. :) 


Best Openid client plugin by far.


After testing multiple OpenID plugins – even paid one – this is by far the best. Thank you!



Some suggestions for improvements: more flexible filtering, better documentation and enhanced multisite support.


Best OpenID plugin and free!

A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.

OAuth2 Account Login vs OpenID Connect Generic Client