Automattic

WordPress.org

Alex Kirk

Ashish Kumar (Ashfame)

Paulo Pinto

<p>With this plugin you can use your own WordPress install to authenticate with a webservice that provides <a href="https://openid.net/connect/" rel="nofollow ugc">OpenID Connect</a> to implement Single-Sign On (SSO) for your users.</p>
<p>The plugin is currently only configured using constants and hooks as follows:</p>
<h3>Define the RSA keys</h3>
<p>If you don’t have keys that you want to use yet, generate them using these commands:</p>
<pre><code>openssl genrsa -out oidc.key 4096
openssl rsa -in oidc.key -pubout -out public.key
</code></pre>
<p>And make them available to the plugin as follows (this needs to be added before WordPress loads):</p>
<pre><code>define( 'OIDC_PUBLIC_KEY', <<<OIDC_PUBLIC_KEY
-----BEGIN PUBLIC KEY-----
...
-----END PUBLIC KEY-----
OIDC_PUBLIC_KEY
);

define( 'OIDC_PRIVATE_KEY', <<<OIDC_PRIVATE_KEY
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
OIDC_PRIVATE_KEY
);
</code></pre>
<p>Alternatively, you can also put them outside the webroot and load them from the files like this:</p>
<pre><code>define( 'OIDC_PUBLIC_KEY', file_get_contents( '/web-inaccessible/oidc.key' ) );
define( 'OIDC_PRIVATE_KEY', file_get_contents( '/web-inaccessible/private.key' ) );
</code></pre>
<h3>Define the clients</h3>
<p>Define your clients by adding a filter to <code>oidc_registered_clients</code> in a separate plugin file or <code>functions.php</code> of your theme or in a MU-plugin like:</p>
<pre><code>add_filter( 'oidc_registered_clients', 'my_oidc_clients' );
function my_oidc_clients() {
    return array(
        'client_id_random_string' => array(
            'name' => 'The name of the Client',
            'secret' => 'a secret string',
            'redirect_uri' => 'https://example.com/redirect.uri',
            'grant_types' => array( 'authorization_code' ),
            'scope' => 'openid profile',
        ),
    );
}
</code></pre>
<h3>Exclude URL from caching</h3>
<ul>
<li><code>example.com/wp-json/openid-connect/userinfo</code>: We implement caching exclusion measures for this endpoint by setting <code>Cache-Control: 'no-cache'</code> headers and defining the <code>DONOTCACHEPAGE</code> constant. If you have a unique caching configuration, please ensure that you manually exclude this URL from caching.</li>
</ul>
<h3>Github Repo</h3>
<p>You can report any issues you encounter directly on <a href="https://github.com/Automattic/wp-openid-connect-server" rel="nofollow ugc">Github repo: Automattic/wp-openid-connect-server</a></p>


OpenID Connect Server

Use OpenID Connect to log in to other webservices using your own WordPress.

mysteve06

<p>WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Azure AD, Azure B2C, Clever, Discord, Google, Google Apps, GitHub, GitLab, Invision Community, Keycloak, LinkedIn, Office 365, Okta, OpenAM, PayPal, Ping Identity, Salesforce, WSO2 Identity Server, Zendesk or other custom OAuth 2.0 / OpenID Connect providers. It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect (OIDC) 1.0 standards. With WP OAuth Client, no third-party is required. This plugin has everything you require.</p>
<h4>OAuth Client 2.0 / OpenID Features</h4>
<ul>
<li>Attribute Mapping</li>
<li>Role Mapping</li>
<li>Connectivity Test user validation by entering the credentials in the plugin using OAuth Client.</li>
<li>Redirect to specific URL after Auto-Login / Register</li>
<li>Redirect based on URL</li>
<li>Allow only specific IP addresses to Login / Register based</li>
<li>Allow only domains to Register based</li>
</ul>
<h4>Supported list of OAuth Grant types ( Comming Soon )</h4>
<ul>
<li>Authorization Code grant (currently support)</li>
<li>OpenID Connect ( currently support )</li>
<li>Implicit grant</li>
<li>User Credentials</li>
<li>Client Credentials</li>
<li>Refresh Token</li>
<li>OpenID Discovery</li>
<li>Public Clients </li>
<li>Public Client Proof of Key Exchange ( PKCE )</li>
</ul>
<h3>Supported list of popular OAuth Servers</h3>
<h3>Our WordPress OAuth client Single Sign On ( WordPress SSO ) plugin supports any third-party / OAuth OpenID providers. Some OAuth providers are listed below.</h3>
<ul>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with AWS Cognito</li>
<li>OAuth SSO Login with Amazon</li>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with Azure B2C</li>
<li>OAuth SSO Login with Clever</li>
<li>OAuth SSO Login with Discord</li>
<li>OAuth SSO Login with Google</li>
<li>OAuth SSO Login with Google Apps</li>
<li>OAuth SSO Login with GitHub</li>
<li>OAuth SSO Login with GitLab</li>
<li>OAuth SSO Login with Invision Community</li>
<li>OAuth SSO Login with Keycloak</li>
<li>OAuth SSO Login with LinkedIn</li>
<li>OAuth SSO Login with Office 365</li>
<li>OAuth SSO Login with Okta</li>
<li>OAuth SSO Login with OpenAM</li>
<li>OAuth SSO Login with PayPal</li>
<li>OAuth SSO Login with Ping Identity</li>
<li>OAuth SSO Login with Salesforce</li>
<li>OAuth SSO Login with Slack</li>
<li>OAuth SSO Login wtth WSO2 Identity Server</li>
<li>OAuth SSO Login with WHMC</li>
<li>OAuth SSO Login with Zendesk </li>
<li>OAuth SSO Login with custom OAuth 2.0 / OpenID Connect providers</li>
<li>It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect ( OIDC )</li>
</ul>
<h3>Support</h3>
<ul>
<li>To assist with the setup, our team is only an email away from you. Please drop us an email at mysteve06@gmail.com so that one member of our team can reach you in no time to set up the plugin.</li>
</ul>
<h3>About OAuth and SSO</h3>
<h4>What is Single Sign-On ?</h4>
<p>Single sign-on (SSO) is a form of authentication that allows users to use just one set of credentials to safely authenticate several applications and websites. OAuth and OpenID Connect are token-based Single Sign-On (SSO) protocols that allow third-party applications to access an end user’s account information without revealing the password.</p>
<h4>What is OAuth ?</h4>
<p>OAuth is an open-standard authorization protocol or mechanism that provides the “secure designated access” ability for applications. For example, without having to give example.com your OAuth Server password, you can tell your OAuth Server that it’s OK for example.com to access the site(Using role mapping, you can limit access to content based on roles).</p>
<h4>What is OAuth Client?</h4>
<p>Application requesting access to a protected resource on behalf of the Resource Owner.</p>
<h4>What is OAuth Server?</h4>
<p>OAuth Server provides the user information without sharing the credentials.</p>
<h4>What is OAuth Scope?</h4>
<p>Scope is a feature in OAuth 2.0 to restrict the access of an application to a user’s account. One or more scopes may be requested by an applicant, this information is then provided in the consent screen to the user, and the access token given to the application will be restricted to the scopes granted.</p>
<h4>Can you set this up for me on my current website?</h4>
<p><em>Yes</em>, without a doubt. If you ever want assistance, please do not hesitate to contact us at mysteve06@gmail.com.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress since 5.0 or higher</li>
<li>PHP >= 7.2</li>
</ul>
<h3>Frequently Asked Questions ( FAQ’s )</h3>
<p>For support or troubleshooting help please email us at mysteve06@gmail.com.</p>


OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )

Thanks a lot for this simple and efficient plugin.

simple and efficient


To clarify this at the beginning: I’m absolutely not against paid features. The problem here is, that there is nothing mentioned that some of the features, which are part of the readme and thus made me want to use this plugin, are behind a paywall.



Besides that, support doesn’t seem to be a priority. I asked for how to access these features since I first didn’t see the tab with the plans, but even after that there was no answer from the support whatsoever.



Additionally, to me it looks more like a clone of OAuth Single Sign On – SSO (OAuth Client) by miniOrange, which I don’t think is the best idea since the user experience can be improved dramatically.



The features that work without payment seem to work fine, though.


Most of the features are not for free

WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Az …

OpenID Connect Server vs OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )