Daniel Bachhuber

Ryan McCue

Joe Hoyle

Rachel Baker

<p>Used together with the <a href="https://github.com/WP-API/OAuth1" rel="nofollow ugc">WP REST API OAuth 1.0a Server plugin</a>, this allows <a href="https://apps.wp-api.org/" rel="nofollow ugc">the WP RET API Authentication Broker</a><br />
to connect to your site.</p>
<p>Read about how it works <a href="https://apps.wp-api.org/" rel="nofollow ugc">on the reference broker</a>, or <a href="https://apps.wp-api.org/spec/" rel="nofollow ugc">read the full specification</a>.</p>


WordPress REST API – Authentication Broker

Used together with the WP REST API OAuth 1.0a Server plugin, this allows the WP RET API Authentication Broker

mysteve06

<p>WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Azure AD, Azure B2C, Clever, Discord, Google, Google Apps, GitHub, GitLab, Invision Community, Keycloak, LinkedIn, Office 365, Okta, OpenAM, PayPal, Ping Identity, Salesforce, WSO2 Identity Server, Zendesk or other custom OAuth 2.0 / OpenID Connect providers. It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect (OIDC) 1.0 standards. With WP OAuth Client, no third-party is required. This plugin has everything you require.</p>
<h4>OAuth Client 2.0 / OpenID Features</h4>
<ul>
<li>Attribute Mapping</li>
<li>Role Mapping</li>
<li>Connectivity Test user validation by entering the credentials in the plugin using OAuth Client.</li>
<li>Redirect to specific URL after Auto-Login / Register</li>
<li>Redirect based on URL</li>
<li>Allow only specific IP addresses to Login / Register based</li>
<li>Allow only domains to Register based</li>
</ul>
<h4>Supported list of OAuth Grant types ( Comming Soon )</h4>
<ul>
<li>Authorization Code grant (currently support)</li>
<li>OpenID Connect ( currently support )</li>
<li>Implicit grant</li>
<li>User Credentials</li>
<li>Client Credentials</li>
<li>Refresh Token</li>
<li>OpenID Discovery</li>
<li>Public Clients </li>
<li>Public Client Proof of Key Exchange ( PKCE )</li>
</ul>
<h3>Supported list of popular OAuth Servers</h3>
<h3>Our WordPress OAuth client Single Sign On ( WordPress SSO ) plugin supports any third-party / OAuth OpenID providers. Some OAuth providers are listed below.</h3>
<ul>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with AWS Cognito</li>
<li>OAuth SSO Login with Amazon</li>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with Azure B2C</li>
<li>OAuth SSO Login with Clever</li>
<li>OAuth SSO Login with Discord</li>
<li>OAuth SSO Login with Google</li>
<li>OAuth SSO Login with Google Apps</li>
<li>OAuth SSO Login with GitHub</li>
<li>OAuth SSO Login with GitLab</li>
<li>OAuth SSO Login with Invision Community</li>
<li>OAuth SSO Login with Keycloak</li>
<li>OAuth SSO Login with LinkedIn</li>
<li>OAuth SSO Login with Office 365</li>
<li>OAuth SSO Login with Okta</li>
<li>OAuth SSO Login with OpenAM</li>
<li>OAuth SSO Login with PayPal</li>
<li>OAuth SSO Login with Ping Identity</li>
<li>OAuth SSO Login with Salesforce</li>
<li>OAuth SSO Login with Slack</li>
<li>OAuth SSO Login wtth WSO2 Identity Server</li>
<li>OAuth SSO Login with WHMC</li>
<li>OAuth SSO Login with Zendesk </li>
<li>OAuth SSO Login with custom OAuth 2.0 / OpenID Connect providers</li>
<li>It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect ( OIDC )</li>
</ul>
<h3>Support</h3>
<ul>
<li>To assist with the setup, our team is only an email away from you. Please drop us an email at mysteve06@gmail.com so that one member of our team can reach you in no time to set up the plugin.</li>
</ul>
<h3>About OAuth and SSO</h3>
<h4>What is Single Sign-On ?</h4>
<p>Single sign-on (SSO) is a form of authentication that allows users to use just one set of credentials to safely authenticate several applications and websites. OAuth and OpenID Connect are token-based Single Sign-On (SSO) protocols that allow third-party applications to access an end user’s account information without revealing the password.</p>
<h4>What is OAuth ?</h4>
<p>OAuth is an open-standard authorization protocol or mechanism that provides the “secure designated access” ability for applications. For example, without having to give example.com your OAuth Server password, you can tell your OAuth Server that it’s OK for example.com to access the site(Using role mapping, you can limit access to content based on roles).</p>
<h4>What is OAuth Client?</h4>
<p>Application requesting access to a protected resource on behalf of the Resource Owner.</p>
<h4>What is OAuth Server?</h4>
<p>OAuth Server provides the user information without sharing the credentials.</p>
<h4>What is OAuth Scope?</h4>
<p>Scope is a feature in OAuth 2.0 to restrict the access of an application to a user’s account. One or more scopes may be requested by an applicant, this information is then provided in the consent screen to the user, and the access token given to the application will be restricted to the scopes granted.</p>
<h4>Can you set this up for me on my current website?</h4>
<p><em>Yes</em>, without a doubt. If you ever want assistance, please do not hesitate to contact us at mysteve06@gmail.com.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress since 5.0 or higher</li>
<li>PHP >= 7.2</li>
</ul>
<h3>Frequently Asked Questions ( FAQ’s )</h3>
<p>For support or troubleshooting help please email us at mysteve06@gmail.com.</p>


OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )

Thanks a lot for this simple and efficient plugin.

simple and efficient


To clarify this at the beginning: I’m absolutely not against paid features. The problem here is, that there is nothing mentioned that some of the features, which are part of the readme and thus made me want to use this plugin, are behind a paywall.



Besides that, support doesn’t seem to be a priority. I asked for how to access these features since I first didn’t see the tab with the plans, but even after that there was no answer from the support whatsoever.



Additionally, to me it looks more like a clone of OAuth Single Sign On – SSO (OAuth Client) by miniOrange, which I don’t think is the best idea since the user experience can be improved dramatically.



The features that work without payment seem to work fine, though.


Most of the features are not for free

WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Az …

WordPress REST API – Authentication Broker vs OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )