jeremyjsimmons

<p>TWL SSO is a secure single sign-on plugin for WordPress that enables seamless authentication using RS256 JWT tokens from an external SSO application.<br />
This plugin provides login security features and is designed for allowing Twelve Legs Marketing centralized authentication management.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Single Sign In</strong>: Agency employees can log into websites they manage from a central dashboard.</li>
<li><strong>Just-in-Time User Provisioning</strong>: Automatic user creation and role assignment</li>
<li><strong>JWT Validation</strong>: Full RS256 signature verification with JWKS endpoint integration</li>
<li><strong>Key Rotation</strong>: Support key rotation through JWKS endpoint</li>
<li><strong>Role Management</strong>: Flexible role assignment from JWT claims</li>
<li><strong>Referrer Validation</strong>: Enhanced security through referrer validation</li>
<li><strong>Audience Validation</strong>: Ensures tokens are valid for the specific WordPress site</li>
<li><strong>Token Expiration</strong>: Built-in token expiration and clock skew tolerance</li>
<li><strong>Email Validation</strong>: Comprehensive email validation with optional allowlist</li>
<li><strong>Caching</strong>: JWKS caching for improved performance</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Referrer validation to prevent unauthorized access</li>
<li>JWT signature verification using public key cryptography</li>
<li>Issuer validation to ensure tokens come from trusted sources</li>
<li>Audience validation to prevent token reuse across sites</li>
<li>Token expiration validation with configurable leeway</li>
<li>Email format validation and filtering via hook</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>WordPress installations managed centrally by agency</li>
<li>Organization using Google for external identity provider</li>
</ul>
<h3>Usage</h3>
<h4>Authentication Flow</h4>
<ol>
<li>User clicks login link from SSO application sso.twelvelegsmarketing.com</li>
<li>SSO application redirects to WordPress with JWT token: <code>/wp-login.php?action=twl_sso&token=JWT_TOKEN</code></li>
<li>Plugin validates the JWT token signature and claims</li>
<li>Plugin extracts user information from JWT claims</li>
<li>Plugin creates or retrieves WordPress user</li>
<li>Plugin assigns appropriate role based on JWT claims</li>
<li>User is logged into WordPress</li>
</ol>
<h4>JWT Claims</h4>
<p>The plugin expects the following JWT claims:</p>
<ul>
<li><code>email</code> or <code>sub</code>: User’s email address</li>
<li><code>iss</code>: Issuer (must match allowed issuers)</li>
<li><code>aud</code>: Audience (must match WordPress site URL)</li>
<li><code>exp</code>: Expiration time</li>
<li><code>nbf</code>: Not before time (optional)</li>
<li><code>wp_role</code>: WordPress role to assign (optional)</li>
<li><code>name</code>: User’s display name (optional)</li>
<li><code>given_name</code>: User’s first name (optional)</li>
<li><code>family_name</code>: User’s last name (optional)</li>
</ul>
<h4>Configuration</h4>
<p>The plugin automatically configures itself based on the WordPress environment:</p>
<ul>
<li><strong>Production</strong>: Only allows <code>https://sso.twelvelegsmarketing.com</code> as issuer</li>
<li><strong>Development/Staging</strong>: Also allows <code>https://localhost:8443</code> as issuer</li>
</ul>
<h4>Customization</h4>
<p>You can customize the plugin behavior using WordPress filters:</p>
<ul>
<li><code>twl_sso_allow_email</code>: Filter to control which email addresses are allowed</li>
<li><code>twl_sso_allowed_roles</code>: Filter to control which roles can be assigned</li>
<li><code>twl_sso_allowed_issuers</code>: Filter to control which issuers are allowed</li>
</ul>
<h3>Support</h3>
<p>For support, please contact Twelve Legs Marketing at https://twelvelegsmarketing.com</p>
<h3>Privacy Policy</h3>
<p>This plugin does not collect, store, or transmit any personal data. All authentication is handled through secure JWT tokens from your configured SSO provider.</p>


Twelve Legs Marketing SSO

Single sign-on plugin for WordPress that accepts RS256 JWTs from the TWL SSO application for secure authentication.

oneteamsoftware

<p>Introducing our <strong>Simple REST API Authentication</strong> plugin for WordPress – the ultimate solution for seamless integration between your website and external applications.</p>
<p>This plugin lets you use Basic Authentication for WordPress REST API and other custom-developed endpoints as well as third-party plugin REST API endpoints with <strong>WooCommerce REST API credentials</strong>.</p>
<p>With Simple REST API Authentication plugin, you won’t have to use different credentials or expose your user name and password to upload media to WordPress and then use it for WooCommerce products.</p>
<h4>Features</h4>
<ul>
<li>Seamless integration with WooCommerce REST API credentials for WordPress REST API</li>
<li>Debugging capabilities for troubleshooting</li>
<li>Flexibility to enable or disable the SSL requirement for added security.</li>
</ul>
<p>The WordPress REST API is a powerful tool that makes CRUD (Create, Read, Update & Delete) operations available from anywhere, instead of being limited to the admin dashboard.</p>
<p>It provides a lightweight form of communication between the client and the server, making it a great solution for exchanging data.</p>
<p>This plugin can be used to create iOS/Android, etc native apps, and we can use any language we want as long as the language can make HTTP requests and interpret JSON such as Node.js, Express.js, Ruby, Python etc.</p>
<p>The possibilities are endless with this plugin, and it can be used in hundreds of various scenarios to make your website more accessible, efficient and user-friendly.</p>
<p><strong>Upgrade your website to the next level with our Simple REST API Authentication plugin today!</strong></p>
<p>These are only a few examples of possible use cases and they are only limited by your imagination and requirement.<br />
In case it is not enough, then feel free to <a href="https://1teamsoftware.com/contact-us/" rel="nofollow ugc">Contact Us</a> and we will find a way to meet your requirements.</p>
<h3>PREMIUM PLUGINS</h3>
<ul>
<li><a href="https://1teamsoftware.com/product/woocommerce-free-shipping-per-package-pro/" rel="nofollow ugc">Free Shipping Per Package PRO</a> – Free Shipping based on advanced conditions.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-chitchats-shipping/" rel="nofollow ugc">ChitChats Shipping</a> – Ship your packages from Canada via USA as if you were physically there.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-marketplace-cart/" rel="nofollow ugc">Marketplace Cart</a> – Offer Amazon like cart/checkout experience for your customers.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-package-orders/" rel="nofollow ugc">Package Orders</a> – Automatically create separate orders for items shipped from different locations.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-product-categories-menu/" rel="nofollow ugc">Product Categories Menu</a> – Automatically add entire structure of product categories to any menu.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-sticky-product-bar-pro/" rel="nofollow ugc">Sticky Product Bar PRO</a> – Adds a number of amazing features to a a highly configurable sticky product bar.</li>
</ul>
<h3>FREE PLUGINS</h3>
<ul>
<li><a href="https://1teamsoftware.com/product/woocommerce-shipping-packages/" rel="nofollow ugc">Shipping Packages</a> – Split your cart into packages that can be shipped with different shipping methods.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-sticky-product-bar/" rel="nofollow ugc">Sticky Product Bar</a> – Display sticky bar with product details, rating and add to cart button.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-shipping-packages/" rel="nofollow ugc">Shipping Packages</a> – Split your cart into packages that can be shipped with different shipping methods.</li>
<li><a href="https://1teamsoftware.com/product/woocommerce-shipping-discount/" rel="nofollow ugc">Shipping Discount</a> – Configurable shipping discount rules based on the amount spent for the items with a given shipping class.</li>
</ul>


Simple REST API Authenticaton with WooCommerce Credentials

Simple REST API Authentication plugin for WordPress - a powerful solution for integrating your website with external applications.

Twelve Legs Marketing SSO vs Simple REST API Authenticaton with WooCommerce Credentials