Sawolabs

<p><strong>Understanding the plugin:</strong></p>
<p>The SAWO WordPress plugin is an easy-to-integrate passwordless authentication plugin that lets you build, deploy and manage your user authentication in under 6 minutes. This plugin is as easy as it gets, compared to a traditional login user flow, it is fast, seamless and it quickly plugs into your existing application.</p>
<ul>
<li><strong>Features of the plugin:</strong><br />
-Passwordless Authentication<br />
-Customised Frontend Forms<br />
-Data Autonomy – Secure your data and trust<br />
-Improved customer onboarding </li>
</ul>
<p>Data Autonomy makes SAWO one of the best WordPress plugins for user authentication. Your data is end-to-end encrypted, which enables you to secure your user’s data and trust and gives you complete control over your security.</p>
<p>Our plugin makes your user’s experience fast, seamless and hassle-free!</p>
<p>–<strong>Understanding the User-flow</strong><br />
    -The user flow is lean, simple and no-frills attached, exactly how we would want it in the products that we use.<br />
    -User signs up using an email address and a one time code to authenticate . In this case, the OTP is literally just this once.<br />
    for every subsequent login your user can quickly login using their biometric sensors, face ID depending on the device.</p>
<p><a href="https://youtu.be/YDYiPbTWCps" rel="nofollow ugc">Demo Video</a></p>
<p>For a detailed explanation on how the SAWO passwordless authentication plugin works refer to our <a href="https://docs.sawolabs.com/sawo/no-code/wordpress" rel="nofollow ugc">Documents</a> .</p>
<p>We would love to hear from you and get your thoughts/feedback. You can join our Discord community by visiting our <a href="https://discord.com/invite/TpnCfMUE5P" rel="nofollow ugc">Discord</a></p>
<p>You will be part of over 10,000+ developers and businesses that are moving towards building a passwordless future</p>


WordPress Passwordless Auth plugin

I integrated today and its very smooth and uselful.

Helped a lot

SAWO - Providing Secure Authentication solutions to your Apps and Websites eliminating Passwords and OTPs for a seamless user experience.

jeremyjsimmons

<p>TWL SSO is a secure single sign-on plugin for WordPress that enables seamless authentication using RS256 JWT tokens from an external SSO application.<br />
This plugin provides login security features and is designed for allowing Twelve Legs Marketing centralized authentication management.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Single Sign In</strong>: Agency employees can log into websites they manage from a central dashboard.</li>
<li><strong>Just-in-Time User Provisioning</strong>: Automatic user creation and role assignment</li>
<li><strong>JWT Validation</strong>: Full RS256 signature verification with JWKS endpoint integration</li>
<li><strong>Key Rotation</strong>: Support key rotation through JWKS endpoint</li>
<li><strong>Role Management</strong>: Flexible role assignment from JWT claims</li>
<li><strong>Referrer Validation</strong>: Enhanced security through referrer validation</li>
<li><strong>Audience Validation</strong>: Ensures tokens are valid for the specific WordPress site</li>
<li><strong>Token Expiration</strong>: Built-in token expiration and clock skew tolerance</li>
<li><strong>Email Validation</strong>: Comprehensive email validation with optional allowlist</li>
<li><strong>Caching</strong>: JWKS caching for improved performance</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Referrer validation to prevent unauthorized access</li>
<li>JWT signature verification using public key cryptography</li>
<li>Issuer validation to ensure tokens come from trusted sources</li>
<li>Audience validation to prevent token reuse across sites</li>
<li>Token expiration validation with configurable leeway</li>
<li>Email format validation and filtering via hook</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>WordPress installations managed centrally by agency</li>
<li>Organization using Google for external identity provider</li>
</ul>
<h3>Usage</h3>
<h4>Authentication Flow</h4>
<ol>
<li>User clicks login link from SSO application sso.twelvelegsmarketing.com</li>
<li>SSO application redirects to WordPress with JWT token: <code>/wp-login.php?action=twl_sso&token=JWT_TOKEN</code></li>
<li>Plugin validates the JWT token signature and claims</li>
<li>Plugin extracts user information from JWT claims</li>
<li>Plugin creates or retrieves WordPress user</li>
<li>Plugin assigns appropriate role based on JWT claims</li>
<li>User is logged into WordPress</li>
</ol>
<h4>JWT Claims</h4>
<p>The plugin expects the following JWT claims:</p>
<ul>
<li><code>email</code> or <code>sub</code>: User’s email address</li>
<li><code>iss</code>: Issuer (must match allowed issuers)</li>
<li><code>aud</code>: Audience (must match WordPress site URL)</li>
<li><code>exp</code>: Expiration time</li>
<li><code>nbf</code>: Not before time (optional)</li>
<li><code>wp_role</code>: WordPress role to assign (optional)</li>
<li><code>name</code>: User’s display name (optional)</li>
<li><code>given_name</code>: User’s first name (optional)</li>
<li><code>family_name</code>: User’s last name (optional)</li>
</ul>
<h4>Configuration</h4>
<p>The plugin automatically configures itself based on the WordPress environment:</p>
<ul>
<li><strong>Production</strong>: Only allows <code>https://sso.twelvelegsmarketing.com</code> as issuer</li>
<li><strong>Development/Staging</strong>: Also allows <code>https://localhost:8443</code> as issuer</li>
</ul>
<h4>Customization</h4>
<p>You can customize the plugin behavior using WordPress filters:</p>
<ul>
<li><code>twl_sso_allow_email</code>: Filter to control which email addresses are allowed</li>
<li><code>twl_sso_allowed_roles</code>: Filter to control which roles can be assigned</li>
<li><code>twl_sso_allowed_issuers</code>: Filter to control which issuers are allowed</li>
</ul>
<h3>Support</h3>
<p>For support, please contact Twelve Legs Marketing at https://twelvelegsmarketing.com</p>
<h3>Privacy Policy</h3>
<p>This plugin does not collect, store, or transmit any personal data. All authentication is handled through secure JWT tokens from your configured SSO provider.</p>


Twelve Legs Marketing SSO

Single sign-on plugin for WordPress that accepts RS256 JWTs from the TWL SSO application for secure authentication.

WordPress Passwordless Auth plugin vs Twelve Legs Marketing SSO