Victor Flores

Wapu Auth is a free Google Social Login plugin for WordPress and WooCommerce. Let your visitors register and sign in using their Google account — no passwords, no forms, no friction.
Whether you run a WooCommerce store, a membership site, or any WordPress site, Wapu Auth makes authentication instant, secure, and completely free — including WooCommerce integration.
<blockquote>
Wapu Auth Pro is coming soon with additional social login providers, advanced analytics exports, and priority support.
</blockquote>
<h4>Free WooCommerce Social Login — No Pro Upgrade Required</h4>
Most social login plugins lock WooCommerce compatibility behind a paid plan. Wapu Auth includes free WooCommerce social login out of the box. The Google login button is automatically placed on your WooCommerce login page, registration page, and checkout form — zero configuration needed.
Store owners: let customers register and sign in at checkout with their Google account. Fewer abandoned carts. More completed purchases.
<h4>Features</h4>
Google Login — One Click 
Let visitors register and sign in with their Google account instantly. No passwords, no forms, no friction. Fast and invisible.
Google One Tap 
Show a non-intrusive sign-in prompt that authenticates users with a single click, without leaving the current page.
Magic Link — Passwordless Login 
Let customers sign in with a secure one-click link sent to their email. No password required. Links expire automatically for security.
Two-Factor Authentication (Email OTP) 
Add email verification codes to the sign-in flow. Enable globally for all users, require it for administrators only, or let customers opt in from their account page.
Active Sessions & Trusted Devices 
Customers can see every device signed in to their account and revoke sessions remotely. Trusted devices skip 2FA automatically for smoother return visits.
Unified Security Tab (WooCommerce My Account) 
Customers manage two-factor authentication, active sessions, trusted devices, and their Google connection from a single “Security” page in My Account.
Built-in SMTP Mailer 
Send magic links and OTP codes reliably using a custom SMTP server configured directly in the plugin settings — no third-party plugin required.
Free WooCommerce Login Integration 
Google login button automatically appears on all WooCommerce forms: login, register, and checkout. Free. No Pro plan required.
Smart Redirect Post-Login 
After signing in on the cart or checkout page, customers return to that page — not to My Account.
Analytics Dashboard 
Track every Google login attempt, new registration, and user activity from your WordPress admin panel.
Domain Restrictions 
Whitelist or blacklist email domains for your Google social login. Only @yourcompany.com users can sign in? Done.
Sandbox Mode 
Test the complete Google OAuth login flow with specific test emails before going live. No risk to production data.
Customizable Google Login Button 
Match the login button to your brand. Adjust colors, text, size, and style with a live visual editor — no CSS required.
Popup Mode 
Display the Google login prompt in a popup window for a seamless, redirect-free experience.
Activity Log 
Full log of every login attempt: status, email, timestamp, and optional GeoIP location data.
Shortcode Support 
Place the Google login button anywhere on your site: 
 [wapu_auth_button] — Google login button 
 [wapu_auth_login_form] — Full custom login form with Google login 
 [wapu_auth_register_form] — Full custom registration form with Google login
Custom Login & Registration Form Templates 
Replace the default WordPress login and register pages with three built-in templates: Classic, Modern, and Compact. All include the Google login button.
Setup Wizard 
Step-by-step guided setup walks you through creating Google OAuth credentials and configuring the plugin in under 5 minutes.
Full Internationalization 
Fully translated into English and Spanish. Ready for community translation via translate.wordpress.org.
<h4>Who Uses Wapu Auth?</h4>
WooCommerce store owners looking to reduce cart abandonment by adding Google login to the checkout page — free, without a Pro plan.
Membership site owners who want fast, trusted social login and registration using Google accounts.
WordPress developers and agencies who need a clean, standards-compliant Google OAuth plugin for client sites.
Users switching from Nextend Social Login who need free WooCommerce social login integration without paying for a Pro addon.
<h4>How Google Social Login Works</h4>
<ol>
<li>Visitor clicks the Google login button on your site</li>
<li>Google authenticates the user via secure OAuth 2.0</li>
<li>Wapu Auth creates or matches their WordPress account by email</li>
<li>User is logged in — done. The whole process takes under 3 seconds.</li>
</ol>
Existing users who already have a WordPress account with the same Google email address are automatically matched and logged in — no duplicate accounts, no confusion.
<h4>Privacy & Compliance</h4>
Wapu Auth connects to Google’s OAuth API only when a user actively clicks the Google login button. GeoIP enrichment and Google Analytics integration are optional and disabled by default. Site owners are responsible for appropriate consent mechanisms for their jurisdiction (GDPR, CCPA, etc.).
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 8.0 or higher</li>
<li>SSL certificate (HTTPS) — required by Google OAuth</li>
<li>Free Google Cloud Console account — to generate OAuth credentials</li>
<li>WooCommerce 7.0 or higher (optional, for automatic WooCommerce social login integration)</li>
</ul>
<h3>Hooks & Filters</h3>
Wapu Auth exposes the following WordPress action and filter hooks so developers can extend the authentication flow without modifying plugin files.
<h4>Actions</h4>
<ul>
<li><code>wapu_auth_before_login</code> — Fires right before a user is authenticated by Wapu Auth.</li>
<li><code>wapu_auth_user_authenticated</code> — Fires after a WordPress user is logged in via Google. Passes <code>$user</code> (WP_User), <code>$google_user</code> (array), and <code>$is_new_user</code> (bool).</li>
<li><code>wapu_auth_user_created</code> — Fires after a new WordPress user is created from a Google account. Passes <code>$user_id</code>, <code>$email</code>, and <code>$google_id</code>.</li>
<li><code>wapu_auth_google_account_unlinked</code> — Fires when a user disconnects their Google account from My Account. Passes <code>$user_id</code>.</li>
<li><code>wapu_auth_analytics_event</code> — Fires when an analytics event is recorded. Passes <code>$event_type</code>, <code>$user_id</code>, and <code>$data</code>.</li>
<li><code>wapu_auth_log</code> — Fires on every plugin log entry. Passes <code>$message</code>, <code>$level</code>, and <code>$context</code>. Useful for routing logs to a custom handler.</li>
<li><code>wp_login</code> — The standard WordPress action fires on every successful Google login so security and 2FA plugins receive Google logins uniformly.</li>
</ul>
<h4>Filters</h4>
<ul>
<li><code>wapu_auth_auth_params</code> — Modify the query parameters sent to Google’s OAuth authorization endpoint (scope, prompt, hd, etc.).</li>
<li><code>wapu_auth_user_data</code> — Modify the user data array returned by Google before Wapu Auth creates or matches an account.</li>
<li><code>wapu_auth_redirect_url</code> — Override the URL users are redirected to after a successful login. Passes <code>$url</code>, <code>$user</code>, and <code>$is_new_user</code>.</li>
<li><code>wapu_auth_error_message</code> — Customize the error message shown to the user when authentication fails. Passes <code>$message</code> and <code>$code</code>.</li>
<li><code>wapu_auth_button_html</code> — Modify the rendered login button HTML. Passes <code>$html</code>, <code>$args</code>, and <code>$settings</code>.</li>
<li><code>wapu_auth_redirect_uri</code> — Override the OAuth callback redirect URI registered with Google. Passes the current URI string.</li>
<li><code>wapu_auth_geoip_enabled</code> — Enable or disable GeoIP lookup programmatically. Passes the current boolean value.</li>
</ul>
<h3>External Services</h3>
This plugin connects to the following external services only under clearly documented conditions.
<h4>1. Google OAuth 2.0 / OpenID Connect (required for Google social login)</h4>
Endpoints: 
* <code>https://accounts.google.com/o/oauth2/v2/auth</code> 
* <code>https://oauth2.googleapis.com/token</code> 
* <code>https://www.googleapis.com/oauth2/v2/userinfo</code> 
* <code>https://accounts.google.com/.well-known/openid-configuration</code> (admin diagnostics only)
Data sent: Client ID, redirect URI, OAuth scope, state token, and authorization code. An access token is sent to retrieve the user’s Google profile.
Data received: Google account ID, email address, display name, profile picture URL, email verification status, and locale.
When triggered: Only when a user actively clicks the Google login button, or when an admin runs connection diagnostics from the settings page.
Google’s policies: <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a> | <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms of Service</a>
<h4>2. GeoIP Providers (optional — disabled by default)</h4>
Services: <code>https://ipapi.co/</code> with <code>https://ipwho.is/</code> as fallback.
Data sent: Visitor IP address for location lookup.
When triggered: Only when GeoIP enrichment is enabled in the plugin’s security settings.
Note: Enable only with appropriate legal basis and user consent where required (e.g. GDPR).
Policies: <a href="https://ipapi.co/privacy/" rel="nofollow ugc">ipapi.co</a> | <a href="https://ipwhois.io/privacy-policy/" rel="nofollow ugc">ipwhois</a>
<h4>3. Google Analytics 4 Event Bridge (optional — disabled by default)</h4>
Service: Uses the site’s existing gtag / GA4 setup, if present.
Data sent: Social login event names and metadata only (login_start, success/error status).
When triggered: Only when a GA4 Measurement ID is configured and analytics is enabled in plugin settings.
Note: Site owners are responsible for obtaining required user consent before enabling this feature.
<h4>4. Google Fonts (optional frontend asset)</h4>
Services: <code>https://fonts.googleapis.com</code> | <code>https://fonts.gstatic.com</code>
Data sent: Standard browser request headers (IP, user-agent) to retrieve font CSS.
When triggered: When the social login button is rendered on the frontend.
Google’s policies: <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>

Wapu Auth – Google Social Login for WordPress & WooCommerce

Google social login for WordPress & WooCommerce. One-click sign-in, passwordless magic links, email two-factor authentication, session management, …

miniOrange

Now Secure your website login by Google Apps Login which allows Single Sign On(SSO) to WordPress using Google credentials (Gsuite) for your users or employees. Google Apps Login use Google credentials to provide better experience compared to WordPress login options. For example – User can do One-Click Login to WordPress account with their Google Credentials so it’s not required of them to remember multiple sets of username & password.
Google Apps Login is trusted enterprise plugin & used by many organizations for Single Sign On(SSO). Google Apps Login supports both OAuth & SAML to provide secure authentication. You can choose from either SAML or OAuth protocol to Single Sign On(SSO) into WordPress. Which protocol to choose depends on your requirements. You can contact us at info@xecurify.com for help with deciding the protocol you choose.
Google Apps Login maps attribute like username, firstname, lastname & email to your WordPress user details. With the help of Google Apps Login, you can manage user attributes from Gsuite Profile data to your WordPress site & WordPress updates user details according to the Gsuite user profile data at the time of registration/login. Also, you can control user access through role mapping which helps you to assign specific roles to users in WordPress according to the user’s group in Google Apps/Gsuite.
<h4>FREE VERSION FEATURES</h4>
<ul>
<li>Unlimited authentication with your Google Apps as IDP or OAuth Provider.</li>
<li>Automatic user registration after login if the user is not already registered with your site.</li>
<li>Use Widgets to easily integrate the login link with your WordPress site.</li>
<li>Attribute Mapping- Basic Attribute Mapping feature to map wordpress user profile attributes like email and first name. Manage username & email with data provided</li>
<li>Oauth Provider Support- It Supports only one Oauth Provider. (ENTERPRISE : Supports Multiple Oauth Provider)</li>
<li>Redirect URL after Login- Automatically Redirect user after successful login. Note: Does not include custom redirect URL</li>
</ul>
<h4>No SSL restriction</h4>
<ul>
<li>Login to WordPress using google credentials.</li>
</ul>
<h4>Premium Version Features(SAML)</h4>
<ul>
<li>All the Free version features.</li>
<li>SAML Single Logout [Premium] – Support for SAML Single Logout (Works only if your IDP supports SLO).</li>
<li>Auto-redirect to IDP [Premium] – Auto-redirect to your IDP for authentication without showing them your WordPress site’s login page.</li>
<li>Protect Site [Premium] – Protect your complete site. Have users authenticate themselves before they could access your site content.</li>
<li>Advanced Attribute Mapping [Premium] – Use this feature to map your IDP attributes to your WordPress site attributes like Username, Email, First Name, Last Name, Group/Role, Display Name.</li>
<li>Advanced Role Mapping [Premium] – Use this feature to assign WordPress roles your users based on the group/role sent by your IDP.</li>
<li>Short Code [Premium] – Use Short Code (PHP or HTML) to place the login link wherever you want on the site.</li>
<li>Reverse-proxy Support [Premium] – Support for sites behind a reverse-proxy.</li>
<li>Select Binding Type [Premium] – Select HTTP-Post or HTTP-Redirect binding type to use for sending SAML Requests.</li>
<li>Integrated Windows Authentication [Premium] – Support for Integrated Windows Authentication (IWA)</li>
<li>Step-by-step Guides [Premium] – Use step-by-step guide to configure your Identity Provider like ADFS, Centrify, Google Apps, Okta, OneLogin, Salesforce, SimpleSAMLphp, Shibboleth, WSO2, JBoss Keycloak, Oracle.</li>
<li>
WordPress Multi-site Support [Premium] – Multi-Site environment is one which allows multiple subdomains / subdirectories to share a single installation. With multisite premium plugin, you can configure the IDP in minutes for all your sites in a network. While, if you have basic premium plugin, you have to do plugin configuration on each site individually as well as multiple service provider configuration’s in the IDP.
For Example – If you have 1 main site with 3 subsites. Then, you have to configure the plugin 3 times on each site as well as 3 service provider configurations in your IDP. Instead, with multisite premium plugin. You have to configure the plugin only once on main network site as well as only 1 service provider configuration in the IDP.
</li>
</ul>
<h4>Premium Version Features(OAuth)</h4>
<ul>
<li>Attribute Mapping- Custom Attribute Mapping feature to map wordpress user profile attributes like username, firstname, lastname, email and profile picture. Manage username & email with data provided</li>
<li>Support for Shortcode- Use shortcode to place login button anywhere in your Theme or Plugin</li>
<li>Advanced Role Mapping- Assign roles to users registering through Oauth Login based on rules you define.</li>
<li>Customize Login Buttons / Icons / Text- Wide range of Oauth login Buttons/Icons and it allows you to customize Text shadow</li>
<li>Custom Redirect URL after Login- Provides Auto Redirection and this is useful if you wanted to globally protect your whole site</li>
<li>Redirect URL after logout- Auto Redirect Users to custom url after logout in WordPress</li>
<li>OpenID Connect Support- Supports login with any 3rd party OpenID Connect server.</li>
<li>Multiple Userinfo Endpoints Support- It Supports multiple Userinfo Endpoints.</li>
<li>Account Linking- Supports the linking of user accounts from OAuth Providers to WordPress account.</li>
<li>App domain specific Registration Restrictions- Restricts registration on your site based on the person’s email address domain</li>
<li>Multi-site Support- Unique ability to support multiple sites under one account</li>
<li>Reverse Proxy Support- Support for sites behind a reverse-proxy or on-prem instances with no internet access.</li>
<li>Email notifications- You can customize the E-mail templates used for the automatic email notifications related to user registration.</li>
<li>Extended OAuth API support- Extend OAuth API support to extend functionality to the existing OAuth client.[ENTERPRISE]</li>
<li>BuddyPress Attribute Mapping- It allows BuddyPress Attribute Mapping.[ENTERPRISE]</li>
<li>Page Restriction according to roles- Limit Access to pages based on user status or roles. This WordPress plugin allows you to restrict access to the content of a page or post to which only certain group of users can access.[ENTERPRISE]</li>
<li>Login Reports- Creates user login and registration reports based on application used. [ENTERPRISE]</li>
</ul>
<h4>SUPPORT</h4>
Customized solutions and support options are available. Email us at info@xecurify.com.

Login with Google Apps

Most secure Google Apps Login Plugin for WordPress. Quick & Easy Configuration with Oauth/SAML which allows authentication through Gsuite (Formerl …

Wapu Auth – Google Social Login for WordPress & WooCommerce vs Login with Google Apps