hectavex

<p>New providers and features are being added regularly! See the <a href="https://wordpress.org/plugins/wp-oauth/changelog/" rel="ugc">Changelog</a> for details.</p>
<p>As a reminder, WP-OAuth is a still a pre-v1.0 release, which means some features may not work as intended or might change over time. Please report any bugs/issues to the support forum so they can be fixed as soon as possible. Thank you!</p>
<h4>Facts</h4>
<ul>
<li>With so many sites offering membership now, users may suffer registration fatigue and forget their passwords, or use the same password for several sites, increasing their security risk.</li>
<li><a href="http://www1.janrain.com/rs/janrain/images/Industry-Research-Value-of-Social-Login-2013.pdf" rel="nofollow ugc">56% of consumers</a> have at least one major social network profile they could be using for membership, registration and login purposes across multiple websites without having to maintain multiple accounts and passwords (2013).</li>
<li><a href="http://www.marketingprofs.com/charts/2012/7060/social-media-users-prefer-social-login-over-traditional" rel="nofollow ugc">40% of consumers</a> currently utilize social login (2012).</li>
</ul>
<h4>Features</h4>
<ul>
<li>Free, unlimited, unbranded and white-labeled from the beginning. No upselling, no payment plans, no SaaS, no proxy authentication! WP-OAuth communicates from your WordPress site <em>directly</em> with the <em>trusted</em> third-party login providers.</li>
<li>WP-OAuth collects and stores ONLY the user’s <em>OAuth identity</em> in the WordPress database for future logins; no other user information is collected or stored.</li>
<li>Fully integrates with WordPress. Drops into existing WordPress sites and integrates with existing WordPress users.</li>
<li>Supports third-party authentication with Google, Facebook, LinkedIn, Github, Reddit, Windows Live, PayPal and Instagram via OAuth 2.0 / OpenID Connect. Providers can be enabled or disabled.</li>
<li>Automatic user registration if <em>Anyone can register</em> has been enabled under Settings > General > Membership.</li>
<li>Users can manage their third-party login providers via the standard “Your Profile” WordPress page. They may link more providers, or unlink existing providers.</li>
<li>Displays a message via Javascript to the user when they login or logout. This feature can also be disabled.</li>
<li>Add a custom login form to any post or page using the [wpoa_login_form] shortcode. Choose from 4 different layouts. See <a href="https://wordpress.org/plugins/wp-oauth/installation/" rel="ugc">Installation</a> for details.</li>
<li>Customize the default login screen with a logo or background. Point the logo URL to your home page instead of WordPress.org. Hide the default username/password login form if you want. Automatically include login buttons for any providers that are enabled.</li>
<li>Supports cURL or stream context for the authentication flow, meaning the plugin should be compatible with a wide range of PHP servers.</li>
<li>The authentication flow was adapted from code samples provided by Google, Facebook and LinkedIn. It has been updated, rigorously tested and debugged for solid error handling. Provider implementations share much of the same code (very high code re-use) and the differences between the providers have been fully documented.</li>
<li>The user experience and on-boarding process was inspired by StackExchange/StackOverflow login system.</li>
<li>Extremely light-weight, optimized code base for high performance. Doesn’t require third-party OAuth libraries; everything is built first-class into the plugin. Previously, WP-OpenLogin required LightOpenID and Facebook-PHP-SDK, but this is no longer necessary. Keeps the bloat low and the performance high. Tested with P3 Plugin Profiler, WP-OAuth’s plugin overhead is around 0.001 seconds which is 6x less overhead than Akismet in the same run! That means there shouldn’t be a performance hit.</li>
</ul>
<h4>How to Contribute</h4>
<p>Visit the <a href="https://github.com/perrybutler/WP-OAuth" rel="nofollow ugc">GitHub development repository</a>.</p>
<h3>History</h3>
<p>This project is a continuation of <a href="http://github.com/perrybutler/wp-openlogin" rel="nofollow ugc">WP-OpenLogin</a> which was originally developed with OpenID in mind. We’re moving on; OAuth 2.0 is now the standard.</p>


WP-OAuth

Allows users to login or register by authenticating with an existing Google, Facebook, LinkedIn, Github, Reddit (and more!) account via OAuth 2.0.

mysteve06

<p>WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Azure AD, Azure B2C, Clever, Discord, Google, Google Apps, GitHub, GitLab, Invision Community, Keycloak, LinkedIn, Office 365, Okta, OpenAM, PayPal, Ping Identity, Salesforce, WSO2 Identity Server, Zendesk or other custom OAuth 2.0 / OpenID Connect providers. It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect (OIDC) 1.0 standards. With WP OAuth Client, no third-party is required. This plugin has everything you require.</p>
<h4>OAuth Client 2.0 / OpenID Features</h4>
<ul>
<li>Attribute Mapping</li>
<li>Role Mapping</li>
<li>Connectivity Test user validation by entering the credentials in the plugin using OAuth Client.</li>
<li>Redirect to specific URL after Auto-Login / Register</li>
<li>Redirect based on URL</li>
<li>Allow only specific IP addresses to Login / Register based</li>
<li>Allow only domains to Register based</li>
</ul>
<h4>Supported list of OAuth Grant types ( Comming Soon )</h4>
<ul>
<li>Authorization Code grant (currently support)</li>
<li>OpenID Connect ( currently support )</li>
<li>Implicit grant</li>
<li>User Credentials</li>
<li>Client Credentials</li>
<li>Refresh Token</li>
<li>OpenID Discovery</li>
<li>Public Clients </li>
<li>Public Client Proof of Key Exchange ( PKCE )</li>
</ul>
<h3>Supported list of popular OAuth Servers</h3>
<h3>Our WordPress OAuth client Single Sign On ( WordPress SSO ) plugin supports any third-party / OAuth OpenID providers. Some OAuth providers are listed below.</h3>
<ul>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with AWS Cognito</li>
<li>OAuth SSO Login with Amazon</li>
<li>OAuth SSO Login with Azure AD</li>
<li>OAuth SSO Login with Azure B2C</li>
<li>OAuth SSO Login with Clever</li>
<li>OAuth SSO Login with Discord</li>
<li>OAuth SSO Login with Google</li>
<li>OAuth SSO Login with Google Apps</li>
<li>OAuth SSO Login with GitHub</li>
<li>OAuth SSO Login with GitLab</li>
<li>OAuth SSO Login with Invision Community</li>
<li>OAuth SSO Login with Keycloak</li>
<li>OAuth SSO Login with LinkedIn</li>
<li>OAuth SSO Login with Office 365</li>
<li>OAuth SSO Login with Okta</li>
<li>OAuth SSO Login with OpenAM</li>
<li>OAuth SSO Login with PayPal</li>
<li>OAuth SSO Login with Ping Identity</li>
<li>OAuth SSO Login with Salesforce</li>
<li>OAuth SSO Login with Slack</li>
<li>OAuth SSO Login wtth WSO2 Identity Server</li>
<li>OAuth SSO Login with WHMC</li>
<li>OAuth SSO Login with Zendesk </li>
<li>OAuth SSO Login with custom OAuth 2.0 / OpenID Connect providers</li>
<li>It works with any OAuth Provider that complies with OAuth 2.0 Server and OpenID Connect ( OIDC )</li>
</ul>
<h3>Support</h3>
<ul>
<li>To assist with the setup, our team is only an email away from you. Please drop us an email at mysteve06@gmail.com so that one member of our team can reach you in no time to set up the plugin.</li>
</ul>
<h3>About OAuth and SSO</h3>
<h4>What is Single Sign-On ?</h4>
<p>Single sign-on (SSO) is a form of authentication that allows users to use just one set of credentials to safely authenticate several applications and websites. OAuth and OpenID Connect are token-based Single Sign-On (SSO) protocols that allow third-party applications to access an end user’s account information without revealing the password.</p>
<h4>What is OAuth ?</h4>
<p>OAuth is an open-standard authorization protocol or mechanism that provides the “secure designated access” ability for applications. For example, without having to give example.com your OAuth Server password, you can tell your OAuth Server that it’s OK for example.com to access the site(Using role mapping, you can limit access to content based on roles).</p>
<h4>What is OAuth Client?</h4>
<p>Application requesting access to a protected resource on behalf of the Resource Owner.</p>
<h4>What is OAuth Server?</h4>
<p>OAuth Server provides the user information without sharing the credentials.</p>
<h4>What is OAuth Scope?</h4>
<p>Scope is a feature in OAuth 2.0 to restrict the access of an application to a user’s account. One or more scopes may be requested by an applicant, this information is then provided in the consent screen to the user, and the access token given to the application will be restricted to the scopes granted.</p>
<h4>Can you set this up for me on my current website?</h4>
<p><em>Yes</em>, without a doubt. If you ever want assistance, please do not hesitate to contact us at mysteve06@gmail.com.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress since 5.0 or higher</li>
<li>PHP >= 7.2</li>
</ul>
<h3>Frequently Asked Questions ( FAQ’s )</h3>
<p>For support or troubleshooting help please email us at mysteve06@gmail.com.</p>


OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )

Thanks a lot for this simple and efficient plugin.

simple and efficient


To clarify this at the beginning: I’m absolutely not against paid features. The problem here is, that there is nothing mentioned that some of the features, which are part of the readme and thus made me want to use this plugin, are behind a paywall.



Besides that, support doesn’t seem to be a priority. I asked for how to access these features since I first didn’t see the tab with the plans, but even after that there was no answer from the support whatsoever.



Additionally, to me it looks more like a clone of OAuth Single Sign On – SSO (OAuth Client) by miniOrange, which I don’t think is the best idea since the user experience can be improved dramatically.



The features that work without payment seem to work fine, though.


Most of the features are not for free

WordPress OAuth client SSO ( OAuth 2.0 & OpenID SSO ) plugin allows login ( Single Sign On ) with your OAuth Servers like  AWS Cognito, Amazon, Az …

WP-OAuth vs OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )