Alexandre Froger

If you run multiple websites and want to keep users separated, but synchronise them automatically and securely for specific user operations, then WP Remote Users Sync is the plugin to use.
<h3>Overview</h3>
This plugin adds the following major features to WordPress:
<ul>
<li>WP Remote Users Sync admin page: a settings page under “Settings > WP Remote Users Sync” to manage remote sites, security settings, import/export users, and view activity logs.</li>
<li>Remote Sites: manage an unlimited amount of connected sites with configuration for incoming and outgoing User Actions (Login, Logout, Create, Update, Delete, Password, Role and Metadata).</li>
<li>Security: WP Remote Users Sync is the only plugin available allowing users to be synchronised with true layers of security in place. All communications are OpenSSL AES-256-CBC encrypted, HMAC SHA256 signed, token-validated and IP-validated.</li>
<li>Import and Export Users: connected websites’ existing user base can be synchronised manually first thanks to the provided import/export tool.</li>
<li>Activity Logs: when enabled, all communications between connected sites are logged for admin review and troubleshooting.</li>
<li>Synchronise all user data: compatible out of the box with WooCommerce, Ultimate Membership, Theme My Login, Gravity Forms, and all user-related plugins as long as they rely on WordPress user metadata and manipulate users with the WordPress user functions.</li>
<li>Customizable: developers can add their own User Actions using action and filter hooks, and more – see the <a href="https://github.com/froger-me/wp-remote-users-sync" rel="nofollow ugc">developers documentation</a>.</li>
<li>Unlimited websites, unlimited features: there are no restrictions in the number of websites to connect together, and no premium version feature restrictions shenanigans – WP Remote Users Sync is fully-featured right out of the box.</li>
</ul>
<h3>Troubleshooting</h3>
Please read the plugin FAQ, there is a lot that may help you there!
WP Remote Users Sync is regularly updated for compatibility, and bug reports are welcome, preferably on <a href="https://github.com/froger-me/wp-remote-users-sync/issues" rel="nofollow ugc">Github</a>. Pull Requests from developers following the <a href="https://github.com/WordPress/WordPress-Coding-Standards" rel="nofollow ugc">WordPress Coding Standards</a> (<code>WordPress-Extra</code> ruleset) are highly appreciated and will be credited upon merge.
In case the plugin has not been updated for a while, no panic: it simply means the compatibility flag has not been changed, and it very likely remains compatible with the latest version of WordPress. This is because it was designed with long-term compatibility in mind from the ground up.
Each bug report will be addressed in a timely manner if properly documented – previously unanswered general inquiries and issues reported on the WordPress forum may take significantly longer to receive a response (if any).
Only issues occurring with included plugin features mentioned in “Synchronise all user data”, core WordPress and default WordPress themes (incl. WooCommerce Storefront) will be considered.
Troubleshooting involving 3rd-party plugins or themes will not be addressed on the WordPress support forum.
<h3>Integrations</h3>
Although WP Remote Users Sync works out of the box with most combinations of WordPress plugins and themes, there are some edge cases necessitating integration, with code included in the core files of WP Remote Users Sync executing under certain conditions.
Integrations added to core are limited to popular plugins and themes: any extra code specific to a handful of installations require a separate custom plugin not shared with the community (created and maintained by a third-party developer).
A typical example necessitating custom integration includes plugins or themes relying on their own custom tables, directly updating the database with SQL queries instead of using WordPress built-in functions, destroying sessions with low-level functions instead of using the built-in WordPress method, etc.
If such need for plugin integration arises, website administrators MUST contact a third-party developer. The plugin author currently does not have the bandwidth to take on custom work for WPRUS.

WP Remote Users Sync

Incredible plugin. Super complex turned simple, really brilliant work.

Great plugin, I was trying figure out how to share user tables in more WordPress installations... switch to multisite option, merge databases option.. all a big mess! But this is so simple and it's working! Congratulations to the developer!!

Magic plugin!


WP Remote Users Sync is an exceptional plugin that seamlessly synchronizes users across multiple WordPress sites. It's easy to install, intuitive to use, and performs flawlessly, making it a must-have for managing users on multiple websites. Highly recommended!


Perfect Plugin!

Synchronise WordPress Users across Multiple Sites.

giuliopanda

The plugin synchronizes users with a main site, allowing you to access all sites where the plugin is installed with the same credentials.
<ul>
<li>One website must be configured as a server, while the other sites must be configured as clients.</li>
<li>Users registered on the server site can now access client sites using the same login credentials.</li>
<li>In the client site, if the user does not exist, a new user is created with the data coming from the server. You can customize the data to be saved on the client site through several hooks described later.</li>
<li>If the user already exists (checks the username) then the plugin updates the user information.</li>
<li>
If the user exists on the client, but not on the server, the plugin blocks access by changing the password to the user saved on the client.
</li>
<li>
For security reasons the plugin does not synchronize administrators.
</li>
<li>When you click on recover password from a client site you are redirected to the server site to recover your password. Once you have recovered the password you return to the client site login. When you try to register a user from a client site you are redirected to the server site to register the user.</li>
<li>If a user has logged in to a client site and logs in again through cookies, then without logging in again the system updates the user data with the server data once a day. If the user no longer exists on the server, he or she is logged out of the client site.</li>
<li>Client users are never deleted even if they are no longer present on the server.</li>
<li>Be careful if a user already exists on the client with the same email, but different user login, the user is not logged in.</li>
</ul>
<h3>Security</h3>
Communications take place via APIs protected through an encrypted token system. Usernames and passwords are never passed in clear text or through a basic authentication system.
Synchronizing administrators is not allowed, administrators must be managed locally.
Some user metadata is not passed because it is specific to the configuration of each individual site.
<h3>Logs</h3>
All operations are logged both on the client site and on the server.
<h3>Customizations</h3>
By default the plugin synchronizes all user except administrators. By default The plugin synchronizes all user data, roles, and metadata.
However, you can customize who and what to sync through many specially created filters and hooks.
First you may want to choose which users you want to sync and which you don’t. You can choose which user roles you want to sync. This way if the user has a certain role it will be synchronized, otherwise not. You can do this through the sucw-roles-exclude-all-sync-except filter placed in the client site.
apply_filters(‘sucw-roles-exclude-all-sync-except’, [‘subscriber’]); 
(CLIENT) Excludes all roles from synchronization except those specified 
This overrides the filter ‘sucw-roles-to-exclude-sync’! 
param array $array_exclude the list of default roles [‘subscriber’] 
since 1.0.0
Otherwise you can choose to sync all users except those who have a certain role.
apply_filters(‘sucw-roles-to-exclude-sync’, [‘administrator’]) 
(CLIENT) These are the roles that do not need to synchronize 
If active The filter ‘sucw-roles-exclude-all-sync-except’ will be ignored 
param array $array_exclude the list of default roles [‘administrator’] 
since 1.0.0
The same role configuration entered in the client sites should be placed in the server site.
add_filter(‘sucw-roles-exclude-all-sync-except’, []); 
(SERVER) Exclude all roles from synchronization except those specified 
If active the ‘sucw-block-user-roles’ filter will be ignored 
param array $array_exclude the list of default roles [] 
since 1.0.0
add_filter(‘sucw-block-user-roles’, [‘administrator’]); 
(SERVER) If the user has one of the blocked roles I won’t let them through 
var array $block_user_roles 
return array 
since 1.0.0
<h3>Below are the other filters and hooks you can use to customize your plugin configuration.</h3>
apply_filters(‘sucw-update-roles’, $roles) 
(CLIENT) The list of roles to save in the user profile when creating or updating the user. if it is an empty array it does not update the roles. 
since 1.0.0
do_action( ‘sucw-update-user’, $user_id, $user_data ) 
(CLIENT) It is called after updating or creating a user 
param: int $user_id the user id 
object $user_data user data 
since 1.0.0
apply_filters(‘sucw-remote-args’, $args) 
(CLIENT) These are the arguments for the client to call the server 
param array $args Default [‘method’:’POST’, ‘timeout’:$timeout, ‘redirection’:2, ‘httpversion’:’1.0′, ‘blocking’:true, ‘headers’:$headers, ‘cookies’:[]] 
since 1.0.0
apply_filters(‘sucw-remote-timeout’, 15) 
(CLIENT) The server call times out 
param int $timeout Default 15 
since 1.0.0
apply_filters(‘sucw-allow-metadata’, true) 
(CLIENT) Allows you to update metadata 
param bool $allow_metadata Allows you to update metadata 
if false it does not update the metadata, if it is an array it only updates the metadata present in the array 
since 1.0.0
apply_filters(‘sucw_register_url’, $url) 
(CLIENT) Manages the registration link 
param string $url il link di default 
since 1.0.0
apply_filters(‘sucw-lostpassword-url’, url) 
(CLIENT) Manages lost password link 
param string $url il link di default 
since 1.0.0
apply_filters( ‘sucw-htaccess’, true ) 
(CLIENT) If the server uses htaccess or you need to make the call to the API via /?rest_route (false) 
since 1.0.0
apply_filters(‘sucw-api-response’, $response, ‘login|check-user’) 
(SERVER) The server’s response to the login client api call 
param array $response [‘response_status’=>’ok’, ‘user’=>$user] | [‘response_status’=>’error’, ‘message’=>’…’] 
param string $type login | check-user 
since 1.0.0
apply_filters(‘sucw-log-limit’, 1000) 
(SERVER & CLIENT) The number of logs to keep on both server and client 
param int $log_limit Default 1000 
since 1.0.0
<h3>TIPS & TRICKS</h3>
If the user misspells the password, it may appear as an error message that the user does not exist. To make the error messages more generic you can use the following code:
<pre><code>add_filter('login_errors', 'login_message', 10, 1);
function login_message($error ) {
 if ($error != '') {
 $error = "Incorrect username or password";
 }
 return $error;
}
</code></pre>
To add a new role you need to create code like this on both the client and server sites
<pre><code>add_role('my_custom_role', 
 __( 'My Custom Role' ), 
 array( 'read' => true, 'read_private_posts' => true, )
);
</code></pre>
<h3>Credits</h3>
Same user credentials as started in 2024 by Giulio Pandolfelli 
Thanks to <a href="https://www.ekebu.com" rel="nofollow ugc">Ekebu</a> for the supports.

SUC – same user credentials

It allows you to log in to two or more of your websites using the same credentials.

WP Remote Users Sync vs SUC – same user credentials