gpaterno

A lot of web sites, even well known ones (newspapers, telcos, …) adopts 
WordPress as their CMS. WordPress is a great platform, however it 
can happen that password leaking or guessing might lead to unauthorized 
access to the platform. A potential attacker can be therefore able to 
change articles, part of the web site and/or make the website unavailable, 
with image and economic damages for a company or for a blogger. 
This is even more true if your website is not SSL protected.
SecurePass is a SaaS service offering an easy and affordable solution 
for One Time Passwords (OTP) and strong authentication in general. They 
offer 5 users for free included with their standard (=basic) account, which 
is more than enough for standard blogs and web sites. Companies can purchase 
additional users, if needed.
More information on the section “Setup and configure SecurePass” in Other Notes. 
To open a SecurePass account go to http://www.secure-pass.net/open
<h3>Setup and configure SecurePass</h3>
If you don’t own already an account with SecurePass, you can sign-up for a new account here: http://www.secure-pass.net/open
Note: Use “misec2011” as promo code, it will give you an entitlement for using 
SecurePass up to 10 users for 2 years free-of-charge. Without any promo code, 
you will have 5 users for 20 years for free. It depends on what you need (more users or more years).
Connect to the admin interface on https://admin.secure-pass.net 
and create a new device (basically a RADIUS client).
In the admin interface, go to the “Device” section and add a new device. 
You will need to set the public IP Address of the server, a fully qualified 
domain name (FQDN), and the secret password for the radius authentication. 
It’s ok if your web server is behind a firewall and/or NAT, ensure that 
your server has rights to send (and receive) RADIUS authentication requests, 
i.e. UDP port 1812.
<h3>Further reading</h3>
<ul>
<li>
This plugin web site: 
https://github.com/gpaterno/wp-securepass/
</li>
<li>
SecurePass web site: 
http://www.secure-pass.net/
</li>
<li>
UK on-line shop for SecurePass (they sell hardware tokens): 
http://shop.nervinesecurity.com/
</li>
</ul>

SecurePass authentication

This is a plugin to autheticate users through the SecurePass One Time Passwords service.

rsecurewp

Rainbow Secure’s MFA and SSO Plugin provides enterprise-level protection with customizable authentication workflows to secure your website and user accounts from credential theft, brute-force attacks, phishing, and more. Empower your users with secure and seamless logins, while protecting your site from cyber threats.
Key Features:
<ol>
<li>
Multi-Factor Authentication (MFA) 
Safeguard your WordPress site with various MFA options, including:
<ul>
<li>Formatted Passwords: Customize passwords with additional layers like color and style. </li>
<li>OTP Challenges: Receive OTPs via Email, SMS, or Mobile App for every login attempt. </li>
<li>Adaptive Authentication: Security adjusted based on device, time of access, location, and behavior. </li>
<li>Remember Device: Trusted devices can be whitelisted to reduce repeated MFA prompts. </li>
<li>Location-based MFA: Define trusted work locations for seamless, secure access. </li>
</ul>
</li>
<li>
Single Sign-On (SSO) 
Simplify login for your users with SSO integration:
<ul>
<li>Supports SAML, Integrate with 1000+ SaaS applications including Microsoft Office, Google Workspace, Salesforce, Zoom, Canva, Stripe, Cloud Providers including Azure AD, AWS, Google, IAM providers including Entra, Okta, Ping Identity.</li>
<li>User provisioning and de-provisioning for automatic WordPress account management. </li>
<li>Role mapping and session management across multiple apps. </li>
</ul>
</li>
<li>
Customizable Security Policies 
Define security rules tailored to your organization’s needs:
<ul>
<li>Set Conditional Access rules based on IP, role, location, or time. </li>
<li>Restrict access to trusted devices or enforce custom password policies with Rainbow Secure features. </li>
<li>Role-based access control ensures only authorized users reach key areas of your site. </li>
</ul>
</li>
<li>
Compliance and Reporting 
Achieve regulatory compliance and maintain control over user activities:
<ul>
<li>GDPR & CCPA compliance: Tools to manage user data privacy with export and deletion capabilities. </li>
<li>Audit logs: Track login attempts and SSO/MFA activity for accountability and monitoring. </li>
<li>Secure data transmission with AES-256 encryption for credentials and tokens. </li>
</ul>
</li>
<li>
WooCommerce & BuddyPress Integration 
Protect your eCommerce transactions with WooCommerce support, and extend MFA and SSO security to BuddyPress for community sites.
</li>
<li>
Custom Branding & Login Flows 
Customize your login screens with your brand’s logos and colors, and create passwordless login options for a seamless, secure user experience.
</li>
<li>
Premium Support & Enterprise Features 
Enjoy 24/7 priority support and enterprise-grade features such as load balancing, high availability, and multi-factor backups for scaling your security.
</li>
</ol>
<h3>License</h3>
This plugin is licensed under the GPLv2 or later. For more information, see the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GNU General Public License</a>.

Rainbow Secure – Advanced MFA & SSO Plugin

Boost your WordPress site’s security with advanced multi-layer MFA and seamless SSO integration.

SecurePass authentication vs Rainbow Secure – Advanced MFA & SSO Plugin