Van Patten Media

Designed to be run in concert with <a href="https://wordpress.org/extend/plugins/ssl-subdomain-for-multisite/" rel="ugc">SSL Subdomain for Multisite</a>.
This plugin depends upon <a href="https://wordpress.org/extend/plugins/wordpress-mu-domain-mapping/" rel="ugc">WPMU Domain Mapping</a>, which must be installed and network activated for this to work.
<h4>What this Plugin does</h4>
If you have the <a href="https://wordpress.org/extend/plugins/ssl-subdomain-for-multisite/" rel="ugc">SSL Subdomain for Multisite</a> plugin installed and network activated, you now have logins and admin happening on <code>https://demo-site.mynetwork.com</code>, while normal site access is on <code>http://demo-site.com</code>.
This works great. Except, once you log in to <code>demo-site.mynetwork.com</code> to do some admin work, then visit the main site, perhaps to post a comment as a logged in WordPress user, you are not logged in on the main site. This means that you can’t, for example, post that comment while logged in — you aren’t logged in there! Other logged-in niceties like the display of the admin bar, or the avoidance of caching, are not available. If you log in again, it logs you in to <code>https://demo-site.mynetwork.com</code> but still you remain not logged in on <code>http://demo-site.com</code>.
This plugin solves this problem by enabling a single sign on (SSO) for both the admin panel and the main site on the custom domain. Upon login, this plugin bounces the user across to the main site to set a cookie there, then bounces them back to the admin panel.
Now, you can work in the admin panel normally, and if you click ‘Visit Site’ from the Admin panel, you go over to the custom domain, where you are also logged in and can perform all actions as normal. Single Sign On!
<h4>(Foolish) Assumptions</h4>
<ol>
<li>
You are using <a href="https://wordpress.org/extend/plugins/wordpress-mu-domain-mapping/" rel="ugc">WPMU Domain Mapping</a> for custom domains on your Multisite network.
</li>
<li>
You have SSL configured for your master domain (e.g. <code>www.mynetwork.com</code>), and for the wildcard <code>*.mynetwork.com</code>. You would like normal site access to happen over the custom domains with HTTP, and all admin and login access over the subdomains of <code>*.mynetwork.com</code> with HTTPS.
</li>
<li>
You have the <code>FORCE_SSL_LOGIN</code> setting in <code>wp-config.php</code> ON.
</li>
<li>
You have the <code>FORCE_SSL_ADMIN</code> setting in <code>wp-config.php</code> OFF. We’ll handle that — WordPress’ forcing of SSL admins may confuse this plugin.
</li>
</ol>
This plugin was tested with and is intended to be used in concert with <a href="https://wordpress.org/extend/plugins/sso-cross-cookie-for-multisite/" rel="ugc">SSL Subdomain for Multisite</a>.
<h4>Known Issues</h4>
<ul>
<li>The <code>redirect_to</code> parameter is not fully working at present. Sometimes, you will be sent to the root admin page, instead of the specific page you were trying to access. This needs to be improved, as it does compromise the user experience.</li>
<li>
This provides better security than only enabling <code>FORCE_SSL_LOGIN</code> but not <code>FORCE_SSL_ADMIN</code>, since with this plugin and <a href="https://wordpress.org/extend/plugins/sso-cross-cookie-for-multisite/" rel="ugc">SSL Subdomain for Multisite</a>, login and admin are served over HTTPS.
However, the nature of this setup means that a man-in-the-middle attacker could theoretically impersonate you for the duration of the login session. It is not possible at the moment to avoid this theoretical attack scenario without serving everything over HTTPS (making arbitrary custom domain support impossible), or preventing login to the actual custom domain site.
</li>
</ul>

SSO Cross Cookie

Single sign on (SSO) for a custom domain site, where the admin panel is on an SSL-secured subdomain. For WordPress Multisite.

nkuttler

Switch between the backends of your WPMU blogs with just one click. This is probably only useful if you don’t have too many blogs and use all of them yourself. The switch links will be added to your super admin menu.
With the release of WordPress 3.0 I merged several WordPress installs into a single network-enabled WordPress 3.0 install. As I post on all of them I wanted the ability to switch quickly between the backends. This plugin makes that possible
By the way, I use the Ozh admin menu plugin. You might need two clicks to switch if you don’t.
<h4>Support</h4>
Visit the <a href="http://www.nkuttler.de/wordpress/" rel="nofollow ugc">plugin’s home page</a> to leave comments, ask questions, etc.
<h4>My plugins</h4>
<a href="http://www.nkuttler.de/2010/06/07/wpmu-switch-backend/" rel="nofollow ugc">MU fast backend switch</a>: Switch between your MU blog backends with one click
<a href="http://www.nkuttler.de/2010/05/21/record-movies-of-visitors/" rel="nofollow ugc">Visitor Movies for WordPress</a>: Did you ever want to know what your visitors are really doing on your site? Watch them!
<a href="http://www.nkuttler.de/wordpress/nktagcloud/" rel="nofollow ugc">Better tag cloud</a>: I was pretty unhappy with the default WordPress tag cloud widget. This one is more powerful and offers a list HTML markup that is consistent with most other widgets.
<a href="http://www.nkuttler.de/wordpress/nkthemeswitch/" rel="nofollow ugc">Theme switch</a>: I like to tweak my main theme that I use on a variety of blogs. If you have ever done this you know how annoying it can be to break things for visitors of your blog. This plugin allows you to use a different theme than the one used for your visitors when you are logged in.
<a href="http://www.nkuttler.de/wordpress/zero-conf-mail/" rel="nofollow ugc">Zero Conf Mail</a>: Simple mail contact form, the way I like it. No ajax, no bloat. No configuration necessary, but possible.
<a href="http://www.nkuttler.de/wordpress/custom-avatars-for-comments/" rel="nofollow ugc">Custom avatars for comments</a>: Add a personal touch: Your visitors will be able to choose from the avatars you upload to your website for each and every comment they make.
<a href="http://www.nkuttler.de/wordpress/nkmovecomments/" rel="nofollow ugc">Move WordPress comments</a>: This plugin adds a small form to every comment on your blog. The form is only added for admins and allows you to <a href="http://www.nkuttler.de/nkmovecomments/" rel="nofollow ugc">move comments</a> to a different post/page and to fix comment threading.
<a href="http://www.nkuttler.de/wordpress/delete-pending-comments" rel="nofollow ugc">Delete Pending Comments</a>: This is a plugin that lets you delete all pending comments at once. Useful for spam victims.
<a href="http://www.nkuttler.de/wordpress/nksnow/" rel="nofollow ugc">Snow and more</a>: This one lets you see snowflakes, leaves, raindrops, balloons or custom images fall down or float upwards on your blog.
<a href="http://www.nkuttler.de/wordpress/nkfireworks/" rel="nofollow ugc">Fireworks</a>: The name says it all, see fireworks on your blog!
<a href="http://www.rhymebox.de/blog/rhymebox-widget/" rel="nofollow ugc">Rhyming widget</a>: I wrote a little online <a href="http://www.rhymebox.com/" rel="nofollow ugc">rhyming dictionary</a>. This is a widget to search it directly from one of your sidebars.

WPMU fast backend switch

Switch between the backends of your WPMU blogs with one click

SSO Cross Cookie vs WPMU fast backend switch