hectavex

<p>New providers and features are being added regularly! See the <a href="https://wordpress.org/plugins/wp-oauth/changelog/" rel="ugc">Changelog</a> for details.</p>
<p>As a reminder, WP-OAuth is a still a pre-v1.0 release, which means some features may not work as intended or might change over time. Please report any bugs/issues to the support forum so they can be fixed as soon as possible. Thank you!</p>
<h4>Facts</h4>
<ul>
<li>With so many sites offering membership now, users may suffer registration fatigue and forget their passwords, or use the same password for several sites, increasing their security risk.</li>
<li><a href="http://www1.janrain.com/rs/janrain/images/Industry-Research-Value-of-Social-Login-2013.pdf" rel="nofollow ugc">56% of consumers</a> have at least one major social network profile they could be using for membership, registration and login purposes across multiple websites without having to maintain multiple accounts and passwords (2013).</li>
<li><a href="http://www.marketingprofs.com/charts/2012/7060/social-media-users-prefer-social-login-over-traditional" rel="nofollow ugc">40% of consumers</a> currently utilize social login (2012).</li>
</ul>
<h4>Features</h4>
<ul>
<li>Free, unlimited, unbranded and white-labeled from the beginning. No upselling, no payment plans, no SaaS, no proxy authentication! WP-OAuth communicates from your WordPress site <em>directly</em> with the <em>trusted</em> third-party login providers.</li>
<li>WP-OAuth collects and stores ONLY the user’s <em>OAuth identity</em> in the WordPress database for future logins; no other user information is collected or stored.</li>
<li>Fully integrates with WordPress. Drops into existing WordPress sites and integrates with existing WordPress users.</li>
<li>Supports third-party authentication with Google, Facebook, LinkedIn, Github, Reddit, Windows Live, PayPal and Instagram via OAuth 2.0 / OpenID Connect. Providers can be enabled or disabled.</li>
<li>Automatic user registration if <em>Anyone can register</em> has been enabled under Settings > General > Membership.</li>
<li>Users can manage their third-party login providers via the standard “Your Profile” WordPress page. They may link more providers, or unlink existing providers.</li>
<li>Displays a message via Javascript to the user when they login or logout. This feature can also be disabled.</li>
<li>Add a custom login form to any post or page using the [wpoa_login_form] shortcode. Choose from 4 different layouts. See <a href="https://wordpress.org/plugins/wp-oauth/installation/" rel="ugc">Installation</a> for details.</li>
<li>Customize the default login screen with a logo or background. Point the logo URL to your home page instead of WordPress.org. Hide the default username/password login form if you want. Automatically include login buttons for any providers that are enabled.</li>
<li>Supports cURL or stream context for the authentication flow, meaning the plugin should be compatible with a wide range of PHP servers.</li>
<li>The authentication flow was adapted from code samples provided by Google, Facebook and LinkedIn. It has been updated, rigorously tested and debugged for solid error handling. Provider implementations share much of the same code (very high code re-use) and the differences between the providers have been fully documented.</li>
<li>The user experience and on-boarding process was inspired by StackExchange/StackOverflow login system.</li>
<li>Extremely light-weight, optimized code base for high performance. Doesn’t require third-party OAuth libraries; everything is built first-class into the plugin. Previously, WP-OpenLogin required LightOpenID and Facebook-PHP-SDK, but this is no longer necessary. Keeps the bloat low and the performance high. Tested with P3 Plugin Profiler, WP-OAuth’s plugin overhead is around 0.001 seconds which is 6x less overhead than Akismet in the same run! That means there shouldn’t be a performance hit.</li>
</ul>
<h4>How to Contribute</h4>
<p>Visit the <a href="https://github.com/perrybutler/WP-OAuth" rel="nofollow ugc">GitHub development repository</a>.</p>
<h3>History</h3>
<p>This project is a continuation of <a href="http://github.com/perrybutler/wp-openlogin" rel="nofollow ugc">WP-OpenLogin</a> which was originally developed with OpenID in mind. We’re moving on; OAuth 2.0 is now the standard.</p>


WP-OAuth

Allows users to login or register by authenticating with an existing Google, Facebook, LinkedIn, Github, Reddit (and more!) account via OAuth 2.0.

miniOrange

<p>WordPress OAuth Client (WordPress OAuth 2.0 Client / Login) plugin allows login with your Eveonline, Clever, Slack, Discord, Custom OAuth server, Openid Connect provider. OAuth Client plugin works with any OAuth provider that conforms to the OAuth 2.0 standard which provides quick & easy configuration.</p>
<h4>Use Cases</h4>
<ul>
<li>Login with Azure (Azure Login)</li>
<li>Login with Facebook (Facebook Login)</li>
<li>Login with AWS Cognito (AWS Cognito Login)</li>
<li>Login with Social Apps</li>
</ul>
<h4>FREE VERSION FEATURES</h4>
<ul>
<li>WordPress OAuth Login supports single sign-on / SSO with any 3rd party OAuth / OpenIDConnect server or custom OAuth / OpenIDConnect server like Amazon, Azure B2C, Office 365, Google, Facebook, etc.</li>
<li>SSO Grant Support – Standard OAuth 2.0 Grant :  Authorization Code</li>
<li>Auto Create Users : After SSO, new user automatically gets created in WordPress</li>
<li>Account Linking : After user SSO to WordPress, if user already exists in WordPress, then his profile gets updated or it will create a new WordPress User</li>
<li>Attribute Mapping : OAuth Login supports username Attribute Mapping feature to map WordPress user profile username attribute.</li>
<li>Login Widget : Use Widgets to easily integrate the login link with your WordPress site</li>
<li>OpenID Connect / OAuth Provider Support : OAuth Login supports only one OpenID Connect / OAuth Provider.</li>
<li>Redirect URL after Login : OAuth Login Automatically Redirects user after successful login.</li>
<li>Logging :  If you run into issues OAuth Login can be helpful to enable debug logging</li>
</ul>
<h4>STANDARD VERSION FEATURES</h4>
<ul>
<li>All the FREE Version Features included.</li>
<li>SSO Grant Support – Standard OAuth 2.0 Grant :  Authorization Code</li>
<li>Optionally Auto Register Users : OAuth Login does automatic user registration after login if the user is not already registered with your site</li>
<li>Basic Role Mapping :  OAuth Login provides basic Attribute Mapping feature to map WordPress user profile attributes like username, firstname, lastname, email and profile picture. Manage username & email with data provided.<br />
                      Also, Assign default role to user registering through OAuth Login based on rules you define.</li>
<li>Support for Shortcode : Use shortcode to place OAuth login button anywhere in your Theme or Plugin</li>
<li>Customize Login Buttons / Icons / Text : Wide range of OAuth Login Buttons/Icons and it allows you to customize Text shadow</li>
<li>Custom Redirect URL after Login : WordPress OAuth SSO provides auto redirection and this is useful if you wanted to globally protect your whole site</li>
<li>Custom Redirect URL after logout : WordPress OAuth SSO allows you to auto redirect Users to custom URL after he logs out from your WordPress site</li>
</ul>
<h4>PREMIUM VERSION FEATURES</h4>
<ul>
<li>All the STANDARD Version Features</li>
<li>SSO Grant Support – Standard OAuth2.0 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available)</li>
<li>Advanced Role Mapping : Assign roles to users registering through OAuth Login based on rules you define.</li>
<li>Force Authentication / Protect Complete Site : Allows user to restrict login / authorization for particular site</li>
<li>Multiple Userinfo Endpoints Support : OAuth Login supports multiple Userinfo Endpoints.</li>
<li>App domain specific Registration Restrictions : OAuth Login restricts registration on your site based on the person’s email address domain</li>
<li>Multi-site Support : OAuth Login have unique ability to support multiple sites under one account</li>
</ul>
<h4>ENTERPRISE VERSION FEATURES</h4>
<ul>
<li>All the PREMIUM Version Features</li>
<li>Multiple OAuth / OpenID Connect Provider Support</li>
<li>SSO Grant Support – Standard OAuth2.0 Grants : Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant, Client Credential Grant (Customization Available)</li>
<li>Single Login button for Multiple Apps : It provides single login button for multiple providers</li>
<li>Extended OAuth API support : Extend OAuth API support to extend functionality to the existing OAuth client.</li>
<li>BuddyPress Attribute Mapping : OAuth Login allows BuddyPress Attribute Mapping.</li>
<li>Page Restriction according to roles : Limit Access to pages based on user status or roles. This WordPress OAuth Login plugin allows you to restrict access to the content of a page or post to which only certain group of users can access.</li>
<li>WP Hooks for Different Events : Provides support for different hooks for user defined functions</li>
<li>Login Reports : OAuth Login creates user login and registration reports based on application used.</li>
</ul>
<h4>No SSL restriction</h4>
<ul>
<li>Login to WordPress using Google credentials (Google Apps Login) or any other app without having an SSL or HTTPS enabled site.</li>
</ul>
<h4>List of popular OAuth Providers we support</h4>
<ul>
<li>Eve Online</li>
<li>Azure AD</li>
<li>AWS Cognito</li>
<li>WHMCS</li>
<li>Ping Federate (Ping / Ping Identity)</li>
<li>Slack</li>
<li>Discord</li>
<li>HR Answerlink / Support center</li>
<li>WSO2</li>
<li>Wechat</li>
<li>Weibo</li>
<li>LinkedIn</li>
<li>Gitlab</li>
<li>Shibboleth</li>
<li>Blizzard (Formerly Battle.net)</li>
<li>servicem8</li>
<li>Meetup</li>
<li>Gluu Server</li>
<li>WSO2</li>
<li>NetIQ</li>
<li>Centrify</li>
<li>Azure AD</li>
<li>Azure B2C</li>
<li>Egnyte</li>
<li>Twitter</li>
<li>OpenAM</li>
<li>Egnyte</li>
</ul>
<h4>List of popular OpenID Connect (OIDC) Providers we support</h4>
<ul>
<li>Amazon</li>
<li>Salesforce</li>
<li>PayPal</li>
<li>Google</li>
<li>AWS Cognito</li>
<li>Okta</li>
<li>OneLogin</li>
<li>Yahoo</li>
<li>ADFS</li>
<li>Gigya</li>
<li>Swiss-RX-Login (Swiss RX Login)</li>
<li>Azure AD</li>
<li>Azure B2C</li>
<li>OpenAM</li>
<li>Centrify</li>
<li>Egnyte</li>
<li>DID.app</li>
</ul>
<h4>List of grant types we support</h4>
<ul>
<li>Authorization code grant</li>
<li>Implicit grant</li>
<li>Resource owner credentials grant</li>
<li>Client credentials grant</li>
<li>Refresh token grant</li>
</ul>
<h4>Other OAuth Providers we support</h4>
<ul>
<li>Other OAuth Providers OAuth Login (OAuth client) plugin support includes Foursquare, Harvest, Mailchimp, Bitrix24, Spotify, Vkontakte, Huddle, Reddit, Strava, Ustream, Yammer, RunKeeper, Instagram, SoundCloud, Pocket, PayPal, Pinterest, Vimeo, Nest, Heroku, DropBox, Buffer, Box, Hubic, Deezer, DeviantArt, Delicious, Dailymotion, Bitly, Mondo, Netatmo, Amazon, WHMCS, FitBit, Clever, Sqaure Connect, Windows, Dash 10, Github, Invision Comminuty, Blizzar, authlete, Keycloak etc.</li>
</ul>


OAuth 2.0 client for SSO

Ok, the free version works well. No doubt.

But be aware that the paid versions are not entirely identical, there were things weirdly missing. The support sends me files modified by dropbox, not serious.

In addition, the code of the paid version is obfuscated !

And support is slow to respond when it comes to reimbursement contrary to what their website indicates.

Very very very disappointed!

Almost well ...

Allows WordPress Login with your Eve Online, Slack, Discord or any custom OAuth server (OAuth Provider) with OAuth 2.0 standard

WP-OAuth vs OAuth 2.0 client for SSO