rsecurewp

Rainbow Secure’s MFA and SSO Plugin provides enterprise-level protection with customizable authentication workflows to secure your website and user accounts from credential theft, brute-force attacks, phishing, and more. Empower your users with secure and seamless logins, while protecting your site from cyber threats.
Key Features:
<ol>
<li>
Multi-Factor Authentication (MFA) 
Safeguard your WordPress site with various MFA options, including:
<ul>
<li>Formatted Passwords: Customize passwords with additional layers like color and style. </li>
<li>OTP Challenges: Receive OTPs via Email, SMS, or Mobile App for every login attempt. </li>
<li>Adaptive Authentication: Security adjusted based on device, time of access, location, and behavior. </li>
<li>Remember Device: Trusted devices can be whitelisted to reduce repeated MFA prompts. </li>
<li>Location-based MFA: Define trusted work locations for seamless, secure access. </li>
</ul>
</li>
<li>
Single Sign-On (SSO) 
Simplify login for your users with SSO integration:
<ul>
<li>Supports SAML, Integrate with 1000+ SaaS applications including Microsoft Office, Google Workspace, Salesforce, Zoom, Canva, Stripe, Cloud Providers including Azure AD, AWS, Google, IAM providers including Entra, Okta, Ping Identity.</li>
<li>User provisioning and de-provisioning for automatic WordPress account management. </li>
<li>Role mapping and session management across multiple apps. </li>
</ul>
</li>
<li>
Customizable Security Policies 
Define security rules tailored to your organization’s needs:
<ul>
<li>Set Conditional Access rules based on IP, role, location, or time. </li>
<li>Restrict access to trusted devices or enforce custom password policies with Rainbow Secure features. </li>
<li>Role-based access control ensures only authorized users reach key areas of your site. </li>
</ul>
</li>
<li>
Compliance and Reporting 
Achieve regulatory compliance and maintain control over user activities:
<ul>
<li>GDPR & CCPA compliance: Tools to manage user data privacy with export and deletion capabilities. </li>
<li>Audit logs: Track login attempts and SSO/MFA activity for accountability and monitoring. </li>
<li>Secure data transmission with AES-256 encryption for credentials and tokens. </li>
</ul>
</li>
<li>
WooCommerce & BuddyPress Integration 
Protect your eCommerce transactions with WooCommerce support, and extend MFA and SSO security to BuddyPress for community sites.
</li>
<li>
Custom Branding & Login Flows 
Customize your login screens with your brand’s logos and colors, and create passwordless login options for a seamless, secure user experience.
</li>
<li>
Premium Support & Enterprise Features 
Enjoy 24/7 priority support and enterprise-grade features such as load balancing, high availability, and multi-factor backups for scaling your security.
</li>
</ol>
<h3>License</h3>
This plugin is licensed under the GPLv2 or later. For more information, see the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GNU General Public License</a>.

Rainbow Secure – Advanced MFA & SSO Plugin

Boost your WordPress site’s security with advanced multi-layer MFA and seamless SSO integration.

Kieran O'Shea

Henrik Schack

This plugin dramatically enhances the security of your WordPress website by adding Multi Factor Authentication (MFA) in the form of One Time Passwords (OTP) 
using <a href="https://www.yubico.com/" rel="nofollow ugc">Yubikey USB Tokens</a>. In addition to providing your username and password to login, this plugin requests an OTP code 
generated by a Yubikey, validates this via an API and only grants access if this check passes. The requirement to use an OTP can be set on a user by user 
basis and there is also a feature to require users above a certain privilege level to always use OTP.
<h3>External services</h3>
This plugin connects to an API to validate the OTP tokens generated by your security key. This is required because storing the private keys 
on the same web server as the site you wish to protect would be a security risk.
By default Yubico’s own validation server is employed, although you may setup your own server and use this instead
The default Yubico API only collects the one time password (OTP) data as provided by your security key when you login. The service validates this 
and then stores this token as “used” so it may not be replayed as part of an attack. It does not collect any other data (such as what URL is being 
authenticated using the key etc.)
This service is provided by “Yubico AB”: <a href="https://www.yubico.com/support/terms-conditions/privacy-notice/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.yubico.com/support/terms-conditions/yubico-website-terms-conditions/" rel="nofollow ugc">Terms of Use</a>

Yubikey


Calling all regular Yubikey users! If you haven’t done so already, please take the time to review the plugin here



If you have a problem, issue or question, please post in the forums first before rating the plugin negatively – most things can be sorted out either through communication or a new release!


Reviews welcome

Enhanced login security for WordPress by requiring the presentation of a One Time Password (OTP) from a registered Yubikey

Rainbow Secure – Advanced MFA & SSO Plugin vs Yubikey