Scott Joudry

<p>The User Access Hub is a service that allows administrators to manage users, user access, and roles across a network of CMS sites.</p>
<h3>User Access Hub</h3>
<p>The User Access Hub is a service that allows administrators to manage users, user access, and roles across a network of CMS sites and will significantly simplify the administrative tasks associated with managing multiple websites. Some reasons why using such a service can help an administrator effectively manage all their CMS sites:</p>
<ol>
<li>Centralized User Management: The User Access Hub provides a single, centralized dashboard where administrators can manage users across all connected CMS sites. This means that instead of logging into each site separately, they can control user access from one location.</li>
<li>User Account Creation and Deletion: Administrators can grant a user access to one or all CMS sites and revoke/delete user access to one or all CMS sites simultaneously. This is particularly useful when onboarding new users or removing access for users who no longer require it.</li>
<li>Role Management: Administrators can assign CMS site defined roles to users for each CMS site, allowing fine tuned access to each CMS site for each user. Permissions will be assigned to roles that are configured on the CMS site.</li>
<li>Single Sign-On (SSO): The User Access Hub allowing users to log in once and access all connected CMS sites without the need for multiple logins. This enhances user experience and security.</li>
<li>Audit Trail and Logging: The hub maintains detailed logs and an audit trail of user activities and changes made by administrators. This is essential for tracking changes, diagnosing issues, and maintaining security.</li>
<li>Scalability: As the network of Drupal sites grows, the User Access Hub can easily scale to accommodate new CMS sites and users without significantly increasing administrative overhead.</li>
<li>Automation: The User Access Hub service is built on the API first methodology and most of the operations that can be performed in the UI can also be performed using the User Access Hub API.</li>
</ol>
<p><a href="https://www.useraccesshub.com/" rel="nofollow ugc">Create a free account to get started.</a></p>
<h3>Additional features</h3>
<ul>
<li>Drupal CMS support</li>
<li>Core Updates Reporting</li>
<li>Plugin Updates Reporting</li>
<li>Theme Updates Reporting</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>This plugin requires the openssl_verify() PHP function, which is part of the <a href="https://www.php.net/manual/en/book.openssl.php" rel="nofollow ugc">OpenSSL library</a> for PHP.</li>
<li>This plugin requires an account on <a href="https://www.useraccesshub.com/" rel="nofollow ugc">User Access Hub</a>.</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Enable the plugin. This will create an API key at User Access Hub > Authentication. None of the fields on this form can be edited through the UI. The ‘Enabled the Handshake Endpoint’ checkbox should be checked.</li>
<li>Select the roles that should be handled by the hub’s SSO functionality at User Access Hub > Roles.</li>
<li>Add the site to the <a href="https://www.useraccesshub.com/" rel="nofollow ugc">User Access Hub</a> hub, setting the API key that was generated from step 1.</li>
<li>In the hub, use the ‘Connect’ operation to allow the hub to handshake with the site. Once this is complete, settings on User Access Hub > Authentication will be updated – ‘Private Key’ will be populated, ‘Site ID’ will be populated and the ‘Enabled the Handshake Endpoint’ checkbox will be unchecked.</li>
<li>To enable all User Access Hub functionality, the final step is to check the ‘Enable all of the User Access Hub functionality.’ checkbox on User Access Hub > Settings.</li>
</ol>
<h3>Overriding Configuration</h3>
<p>In many cases, the configuration that exists in the database will need to be overridden. The case of different config values for different environments springs to mind. This can be accomplished by overriding the configuration in a wp-config.php file:</p>
<pre><code>define( 'USERACCESSHUB_ALLOW_LOCAL', true );
define( 'USERACCESSHUB_API_KEY', 'string' );
define( 'USERACCESSHUB_DEFAULT_ROLE', 'role' );
define( 'USERACCESSHUB_ENABLED', true );
define( 'USERACCESSHUB_HANDSHAKE_ENABLED', true );
define( 'USERACCESSHUB_PUBLIC_KEY', 'string' );
define( 'USERACCESSHUB_REDIRECT', '/redirect/url' );
define( 'USERACCESSHUB_ROLES', array( 'role1', 'role2' ) );
define( 'USERACCESSHUB_SITE_ID', 1 );
</code></pre>
<h3>Commands</h3>
<h3>Enable Handshake</h3>
<p>This WP CLI command will enable the handshake endpoint so a site can be reconnected with the Hub.</p>
<pre><code>wp enable-handshake
</code></pre>
<h3>Disable Handshake</h3>
<p>This WP CLI command will disable the handshake endpoint.</p>
<pre><code>wp disable-handshake
</code></pre>
<h3>Regenerate API Key</h3>
<p>This WP CLI command will re-generate the API key used for the handshake.</p>
<pre><code>wp regenerate-api-key
</code></pre>


User Access Hub

The User Access Hub is a service that allows administrators to manage users, user access, and roles across a network of CMS sites.

TrustedLogin

<p>The easiest and safest way to restrict access to your WordPress site’s Dashboard and administrative menus. Remove Dashboard Access is a lightweight plugin that automatically redirects users who shouldn’t have access to the Dashboard to a custom URL of your choosing. Redirects can also be configured on a per-role/per-capability basis, allowing you to keep certain users out of the Dashboard, while retaining access for others.</p>
<ul>
<li>Limit Dashboard access to user roles:
<ul>
<li>Admins only</li>
<li>Admins + editors</li>
<li>Admins, editors, and authors</li>
<li>or restrict by specific user capability</li>
</ul>
</li>
<li>Choose your own redirect URL</li>
<li>Optionally allow users to edit their profiles</li>
<li>Display a message on the login screen so users know why they’re being redirected</li>
<li>Allow specific admin pages through the redirect — paste a list of URLs your customers should still be able to reach (with wildcard support for grouping related pages)</li>
<li>Optionally extend the block to <code>admin-ajax.php</code> requests for stricter lockdown</li>
</ul>
<p>Blocking access to the Dashboard is a great way to prevent clients from breaking their sites, prevent users from seeing things they shouldn’t, and to keep your site’s backend more secure.</p>
<p><strong>Allow only users with roles or capabilities:</strong></p>
<p>You can restrict Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a specific user capability.</p>
<p><strong>Grant access to user profiles:</strong></p>
<p>Optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won’t be able to access any other sections of the Dashboard.</p>
<p><strong>Show a custom login message:</strong></p>
<ul>
<li>Supply a message to display on the login screen. Leaving this blank disables the message.</li>
</ul>
<p><strong>Allow specific admin pages through the redirect:</strong></p>
<p>Sometimes you want to lock down the Dashboard but still let your customers reach one or two specific admin pages — a payment confirmation, a <a href="https://www.trustedlogin.com/" rel="nofollow ugc">TrustedLogin</a> secret-share screen, a custom report. Paste those URLs into the Allowed URLs box (one per line, relative or absolute), and matching requests will skip the redirect.</p>
<p>Use <code>*</code> as a wildcard inside a query value to match a whole group of pages at once. For example, <code>?page=tl-*</code> allows <code>tl-secrets</code>, <code>tl-config</code>, and any other page whose slug starts with <code>tl-</code>.</p>
<p><strong>Optionally block AJAX requests too:</strong></p>
<p>By default this plugin doesn’t touch requests to <code>admin-ajax.php</code> — most WordPress sites rely on those for legitimate frontend AJAX. If you’d rather the dashboard restriction apply there as well, turn on the “Also block AJAX” checkbox in the Advanced section of the settings page.</p>


Remove Dashboard Access

This plugin is a must-have when working with public roles.

A must-have!

Disable Dashboard access for users of a specific role or capability. Disallowed users are redirected to a chosen URL. Get set up in seconds.

User Access Hub vs Remove Dashboard Access