r0bodev

<p>Titan Social Login adds OAuth-based sign-in to WordPress so visitors can use their existing social accounts instead of creating new passwords.</p>
<h4>Included providers</h4>
<ul>
<li>Amazon</li>
<li>Facebook</li>
<li>Google</li>
<li>X (Twitter)</li>
<li>Microsoft</li>
</ul>
<h4>Key features</h4>
<ul>
<li>Adds login buttons to the WordPress login, registration, and lost password screens.</li>
<li>Optional social login on comment forms.</li>
<li>Account linking inside WordPress user profiles.</li>
<li>Shortcodes: [tsl_login], [tsl_account_links].</li>
<li>Popup or same-window authentication, configurable for desktop and mobile.</li>
<li>Custom redirect after login or first registration.</li>
<li>Design controls for layout, spacing, labels, and button styles.</li>
<li>Placeholder emails for providers that do not return an email address.</li>
</ul>
<p>This plugin uses external OAuth providers for authentication. See the “External Services” section for details.</p>
<h4>Privacy</h4>
<p>Titan Social Login does not collect or send any usage telemetry. OAuth requests go directly to the enabled provider during login. The plugin stores its configuration in your WordPress database.</p>
<h4>Additional features in the Pro version</h4>
<ul>
<li>30+ OAuth providers including Apple, Discord, GitHub, Steam, Telegram, Twitch, Spotify, and more.</li>
<li>Premium integrations for WooCommerce, BuddyPress, Ultimate Member, and Easy Digital Downloads.</li>
<li>Statistics dashboard to monitor social login performance.</li>
<li>Premium updates and priority support.</li>
</ul>
<p>Pro version and pricing: <a href="https://titan.r0bo.dev/#pro" rel="nofollow ugc">https://titan.r0bo.dev/#pro</a><br />
Demo: <a href="https://titan.r0bo.dev/wp-login.php" rel="nofollow ugc">https://titan.r0bo.dev/wp-login.php</a></p>
<h3>External Services</h3>
<p>Titan Social Login connects to third-party OAuth providers to authenticate users. Requests are made only when an administrator enables a provider and a user clicks a login button.</p>
<p>Data sent during OAuth:<br />
– Authorization request: client_id, redirect_uri, response_type, scope, state<br />
– Token exchange: code, client_id, client_secret (if required), redirect_uri<br />
– Profile request: access_token</p>
<p>Data received from providers:<br />
– Provider user ID, name, email address, and profile picture (when available)</p>
<p>Services used:<br />
– Google OAuth API (accounts.google.com, oauth2.googleapis.com, www.googleapis.com). Terms: https://policies.google.com/terms Privacy: https://policies.google.com/privacy<br />
– Facebook Login (www.facebook.com, graph.facebook.com). Terms: https://www.facebook.com/legal/terms Privacy: https://www.facebook.com/privacy/policy<br />
– Amazon Login (www.amazon.com, api.amazon.com). Terms: https://www.amazon.com/gp/help/customer/display.html?nodeId=508088 Privacy: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496<br />
– Microsoft identity platform (login.microsoftonline.com, graph.microsoft.com). Terms: https://www.microsoft.com/servicesagreement Privacy: https://privacy.microsoft.com/privacystatement<br />
– X (Twitter) OAuth 2.0 (twitter.com, api.twitter.com). Terms: https://twitter.com/en/tos Privacy: https://twitter.com/en/privacy</p>
<p>No external requests are made unless the provider is enabled and a user initiates login.</p>
<h3>License</h3>
<p>PHP code (and any JS that links to WordPress APIs) is licensed under the GNU General Public License v2.0 or later (GPL-2.0-or-later). See /license.txt.<br />
Brand icons in /assets/images/icons are trademarks of their respective owners and are included for identification purposes only. See /THIRD-PARTY-NOTICES.txt.<br />
Trademarks belong to their respective owners; this plugin is not affiliated with or endorsed by them.</p>


Titan Social Login

One-click social login and account linking for Amazon, Facebook, Google, X (Twitter), and Microsoft.

Alain-Aymerick FRANCOIS

vbonamy

<p>If you’re happy with this plugin :<br />
As a reward for my efforts, I would like to receive T-shirts (or other goodies) as gifts from the universities or companies that use it.<br />
My size is L. Best regards.</p>
<p>This Apereo CAS authentication plugin has no phpCas library dependency. This is not only an authentication plugin.<br />
You can build custom authorization rules according to cas user attributes populated. If user don’t exist in WordPress<br />
database, it can be created automatically. There are many features. You can customize everything.</p>
<h4>Website</h4>
<p>https://wpcassify.wordpress.com/</p>
<h4>Development and release environment</h4>
<p>This plugin is now developed and tested from a github repository. You can find it here :<br />
https://github.com/WP-Cassify/wp-cassify-develop</p>
<p>Don’t hesitate to contribute to this project. You can fork it and make pull requests !</p>
<h4>Requirements</h4>
<ul>
<li>Require at least PHP version 7.0</li>
<li>Require at least PHP CURL package</li>
</ul>
<h4>Features included</h4>
<ul>
<li>SLO (Single Log Out) support (thanks to dedotombo and me)</li>
<li>Adding NCONTAINS operator (thanks to blandman)</li>
<li>Fix bug on Gateway mode (autologin) (thanks to dedotombo again). Now it’s now necessary to hack theme files to fire it.</li>
<li>Adding option logout on authentication failure to not disturb users</li>
<li>Initialize PHP session at a later stage (on wp_loaded not on init)</li>
<li>
<p>Adding some customs hooks and filters.</p>
</li>
<li>
<p>Tested with Apereo CAS Server version 7.3.5</p>
</li>
<li>Compatible with CAS Protocol version 2 and 3</li>
<li>Automatic user creation if not exist in WordPress database.</li>
<li>Synchronize WordPress User metas with CAS User attributes.</li>
<li>Add support for multivaluate cas user fields. Now multivaluate fields can be serialized to be stored in custom WP User meta.</li>
<li>Backup / Restore plugin configuration options settings</li>
<li>You can choose CAS User attributes you want to populate. Then you can access them via PHP Session.</li>
<li>
<p>Be careful, to access to CAS User Attributes from your theme file (from 1.8.4), use code below :</p>
<pre><code><?php
    if ( isset($GLOBALS['wp-cassify']) ) {
        print_r( $GLOBALS['wp-cassify']->wp_cassify_get_cas_user_datas() );
    }
?>
</code></pre>
</li>
<li>
<p>Set up WordPress Roles to User according to CAS User attributes.</p>
</li>
<li>If plugin is network activated, you can define User Role Rule scope by blog id.</li>
<li>Authorization rule editor.</li>
<li>Compatible with WordPress Access Control Plugin.</li>
<li>Manage URL White List to bypass CAS Authentication on certain pages.</li>
<li>
<p>Much simpler bypass authentication with post method provided by Susan Boland (See online documentation). Create wordpress authentication form with redirect attribute like this (works only if URL bypass is enabled in settings) :</p>
<pre><code><?php

    $args = array(
        'echo'           => true,
        'remember'       => true,
        'redirect' => site_url( '/?wp_cassify_bypass=bypass' ),
        'form_id'        => 'loginform',
        'id_username'    => 'user_login',
        'id_password'    => 'user_pass',
        'id_remember'    => 'rememberme',
        'id_submit'      => 'wp-submit',
        'label_username' => __( 'Username' ),
        'label_password' => __( 'Password' ),
        'label_remember' => __( 'Remember Me' ),
        'label_log_in'   => __( 'Log In' ),
        'value_username' => '',
        'value_remember' => false
    );

    wp_login_form( $args ); 
?>
</code></pre>
</li>
<li>
<p>Receive email notifications when trigger is fired (after user account creation, after user login/logout).</p>
</li>
<li>Define notifications rules based on user attributes values.</li>
<li>Purge user roles before applying user role rules.</li>
<li>Define user account expiration rules bases on CAS User attributes.</li>
<li>Network activation allowed</li>
<li>You can set Service Logout URL (Needs to have CAS Server with followServiceRedirects option configured).</li>
<li>Add support for web application hosted behind a reverse proxy. (Thanks to franck86)</li>
<li>Add custom hooks : wp_cassify_after_cas_authentication, wp_cassify_before_auth_user_wordpress, wp_cassify_before_redirect, wp_cassify_after_redirect. (See online documentation)</li>
<li>Custom filter to perform custom cas server response parsing. Hook name : wp_cassify_custom_parsing_cas_xml_response (See online documentation)</li>
<li>Custom shortcode to generate CAS login/logout link into your blog. (See online documentation)</li>
<li>Debug settings, dump last xml cas server response.</li>
<li>Detect if user has already authenticated by CAS from your public pages and perform auto-login with gateway mode</li>
<li>
<p>Add ‘-IN’ and ‘-NOTIN’ operators to process array attributes values returned from CAS.<br />
When you have :</p>
<pre><code>$cas_user_datas['title'] = array( 'Student', 'Professor' );
</code></pre>
</li>
</ul>
<p>Then you can use :</p>
<pre><code>    (CAS{title} -IN "professor")
</code></pre>


WP Cassify

The plugin is an Apereo CAS Client. It performs CAS authentication and autorization for Wordpress.

Titan Social Login vs WP Cassify