Sawolabs

<p><strong>Understanding the plugin:</strong></p>
<p>The SAWO WordPress plugin is an easy-to-integrate passwordless authentication plugin that lets you build, deploy and manage your user authentication in under 6 minutes. This plugin is as easy as it gets, compared to a traditional login user flow, it is fast, seamless and it quickly plugs into your existing application.</p>
<ul>
<li><strong>Features of the plugin:</strong><br />
-Passwordless Authentication<br />
-Customised Frontend Forms<br />
-Data Autonomy – Secure your data and trust<br />
-Improved customer onboarding </li>
</ul>
<p>Data Autonomy makes SAWO one of the best WordPress plugins for user authentication. Your data is end-to-end encrypted, which enables you to secure your user’s data and trust and gives you complete control over your security.</p>
<p>Our plugin makes your user’s experience fast, seamless and hassle-free!</p>
<p>–<strong>Understanding the User-flow</strong><br />
    -The user flow is lean, simple and no-frills attached, exactly how we would want it in the products that we use.<br />
    -User signs up using an email address and a one time code to authenticate . In this case, the OTP is literally just this once.<br />
    for every subsequent login your user can quickly login using their biometric sensors, face ID depending on the device.</p>
<p><a href="https://youtu.be/YDYiPbTWCps" rel="nofollow ugc">Demo Video</a></p>
<p>For a detailed explanation on how the SAWO passwordless authentication plugin works refer to our <a href="https://docs.sawolabs.com/sawo/no-code/wordpress" rel="nofollow ugc">Documents</a> .</p>
<p>We would love to hear from you and get your thoughts/feedback. You can join our Discord community by visiting our <a href="https://discord.com/invite/TpnCfMUE5P" rel="nofollow ugc">Discord</a></p>
<p>You will be part of over 10,000+ developers and businesses that are moving towards building a passwordless future</p>


WordPress Passwordless Auth plugin

I integrated today and its very smooth and uselful.

Helped a lot

SAWO - Providing Secure Authentication solutions to your Apps and Websites eliminating Passwords and OTPs for a seamless user experience.

Luis Rodrigues

<p>Cassava allows WordPress to act as a single sign-on authenticator using the Central Authentication Service (CAS) protocol.</p>
<p>That way, users on your WordPress install may be able to access different applications that support the CAS protocol by providing a single set of credentials and without exposing the user’s password.</p>
<p>By default, CAS method URIs are provided under the <code>wp-cas</code> endpoint:</p>
<ul>
<li><code>/wp-cas/login</code>: Allows a remote service to request that a user authenticate on the CAS server. Will redirect back to the remote service along with a service ticket.</li>
<li><code>/wp-cas/logout</code>: Terminates the single sign-on session. May optionally redirect the user back to the remote service.</li>
<li><code>/wp-cas/validate</code> [CAS 1.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns a plaintext response.</li>
<li><code>/wp-cas/proxy</code> [CAS 2.0]: Provides access to remote services with proxy tickets in exchange for proxy-granting tickets. Returns an XML response.</li>
<li><code>/wp-cas/proxyValidate</code> [CAS 2.0]: Allows a remote service to validate a service or proxy ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/serviceValidate</code> [CAS 2.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/p3/proxyValidate</code> [CAS 3.0]: Allows a remote service to validate a service or proxy ticket forwarded by the user on redirect. Returns an XML response.</li>
<li><code>/wp-cas/p3/serviceValidate</code> [CAS 3.0]: Allows a remote service to validate a service ticket forwarded by the user on redirect. Returns an XML response.</li>
</ul>
<p>There are a few <a href="http://www.jasig.org/cas/client-integration" rel="nofollow ugc">client integration</a> libraries available for CAS, as well as a handy guide for <a href="https://wiki.jasig.org/display/CASC/CASifying+Applications" rel="nofollow ugc">CASifying several existing applications</a>. Independent WordPress installations may integrate with Cassava using a client plugin such as <a href="https://wordpress.org/plugins/cas-maestro/" rel="ugc">CAS Maestro</a>.</p>
<p>Please follow and contribute to Cassava’s development on <a href="https://github.com/goblindegook/wp-cas-server" rel="nofollow ugc">Github</a>.</p>
<h3>Hooks</h3>
<h4>Action: cas_server_before_request</h4>
<p>Fires before a CAS request is processed.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Action: cas_server_after_request</h4>
<p>Fires after a CAS request is processed.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Action: cas_server_error</h4>
<p>Fires if the CAS server has to return an XML error.</p>
<p>Parameters:</p>
<ul>
<li><em>WP_Error</em> <code>$error</code>: WordPress error to return as XML.</li>
</ul>
<h4>Action: cas_server_validation_success</h4>
<p>Fires on successful ticket validation.</p>
<p>Parameters:</p>
<ul>
<li><em>WP_User</em> <code>$user</code>: WordPress user validated by ticket.</li>
<li><em>string</em> <code>$ticket</code>: Valid ticket string.</li>
</ul>
<h4>Filter: cas_enabled</h4>
<p>Allows developers to disable CAS.</p>
<p>Parameters:</p>
<ul>
<li><em>boolean</em> <code>$cas_enabled</code>: Whether the server should respond to single sign-on requests.</li>
</ul>
<h4>Filter: cas_server_routes</h4>
<p>Allows developers to override the default controller mapping, define additional endpoints and provide alternative implementations to the provided controllers.</p>
<p>Controllers provided in this fashion should extend the <code>\Cassava\CAS\Controller\BaseController</code> class.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$cas_routes</code>: CAS endpoint to controller mapping.</li>
</ul>
<h4>Filter: cas_server_response</h4>
<p>Lets developers change the CAS server response string.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$output</code>: Response output string.</li>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Filter: cas_server_dispatch_args</h4>
<p>Filters the callback arguments to be dispatched for the request. Plugin developers may return a <code>WP_Error</code> object here to abort the request.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$args</code>: Arguments to pass the callback.</li>
<li><em>(string|array)</em> <code>$callback</code>: Callback function or method.</li>
<li><em>string</em> <code>$path</code>: Requested URI path.</li>
</ul>
<h4>Filter: cas_server_login_args</h4>
<p>Allows developers to change the request parameters passed to a <code>/login</code> request.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$args</code>: HTTP request (GET, POST) parameters.</li>
</ul>
<h4>Filter: cas_server_redirect_service</h4>
<p>Filters the redirect URI for the service requesting user authentication.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$service</code>: Service URI requesting user authentication.</li>
<li><em>WP_User</em> <code>$user</code>: Logged in WordPress user.</li>
</ul>
<h4>Filter: cas_server_custom_auth_uri</h4>
<p>Allows developers to redirect the user to a custom login form.</p>
<p>Parameters:</p>
<ul>
<li><em>string</em> <code>$custom_login_url</code>: URI for the custom login page.</li>
<li><em>array</em> <code>$args</code>: Login request parameters.</li>
</ul>
<h4>Filter: cas_server_ticket_expiration</h4>
<p>This filter allows developers to override the default ticket expiration period.</p>
<p>Parameters:</p>
<ul>
<li><em>int</em> <code>$expiration</code>: Ticket expiration period (in seconds).</li>
<li><em>string</em> <code>$type</code>: Type of ticket to set.</li>
<li><em>WP_User</em> <code>$user</code>: Authenticated user associated with the ticket.</li>
</ul>
<h4>Filter: cas_server_validation_user_attributes</h4>
<p>Allows developers to change the list of (key, value) pairs before they’re included in a <code>/serviceValidate</code> response.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$attributes</code>: List of attributes to output.</li>
<li><em>WP_User</em> <code>$user</code>: Authenticated user.</li>
</ul>
<h4>Filter: cas_server_settings_user_attribute_options</h4>
<p>Allows developers to change the list of user attributes that appear in the dashboard for an administrator to set to return on successful validation requests.</p>
<p>Options are stored in an associative array, with user attribute slugs as array keys and option labels as array values.</p>
<p>These settings are valid only for CAS 2.0 validation requests.</p>
<p>Parameters:</p>
<ul>
<li><em>array</em> <code>$attributeOptions</code> Attribute options an administrator can set on the dashboard.</li>
</ul>


Cassava CAS Server

Cassava provides authentication services based on the Jasig CAS protocol.

WordPress Passwordless Auth plugin vs Cassava CAS Server