OAuth Single Sign On – SSO (OAuth Client)

WordPress Single Sign-On (WordPress SSO) with our OAuth & OpenID Connect plugin allows unlimited login/SSO (Single Sign On) with your Azure AD, Azure B2C, G Suite / Google Apps / Google Workspace, ClassLink, Clever, Office 365, AWS Cognito, Discord, PingFederate, Salesforce, Keycloak, Okta, Identity Server, Invision Community or other custom OAuth 2.0 and OpenID Connect providers. WordPress SSO plugin supports SSO with many OAuth 2.0, OAuth 2.1, OAuth 1.0 & OpenID Connect (OIDC) 1.0 providers.

Unlimited number of user can perform SSO with OAuth/OIDC supported Identity Providers on WordPress using Single sign on(SSO).

| Features | OAuth / OpenID Providers Setup guides | Videos |

WordPress Single Sign-On / SSO ( Login to WordPress )

WordPress Single Sign-On (WordPress SSO) allows users to log into any website/application using the single set of credentials of another app/site.
Example: Let’s say you have all your users/customers/members/employees stored on a site, called ‘site A’ and you want all of them to register/login using WordPress SSO to your WordPress site called ‘site B’. In this scenario, you can register/login all your users of site A into site B using the login credentials/account of site A. This is called Single Sign-On or SSO.

WordPress Single Sign-On ( WordPress SSO ) supported Third-Party Application / OAuth OpenID Provider

• The Third-Party Application can be anything where user accounts are stored or a site/application where you want to store/migrate all the users. It can be your social login app, WordPress site, OAuth provider, OpenID provider, custom provider or any database.
• Applications/providers include OAuth Identity Provider, OAuth Server, OpenID Connect Server, OpenID Connect Provider, OIDC Provider, OIDC Server, OAuth Application, OpenID Connect Application, OIDC Application, OpenID Connect Server, OpenID Connect Provider, OpenID Connect Application.

OAuth and OpenID Connect are token-based Single Sign-On (SSO) protocols that allow an end user’s account information to be used by third-party services without exposing the user’s password.

Along with OAuth 2.0, the SSO plugin also has support for OAuth 1.0 and OAuth 2.1 protocols. And, we support the latest OAuth and OpenID Connect protocol including secure 2-Factor Authentication (2FA), and Multi-Factor Authentication (MFA) if enabled at the OAuth/OpenID provider’s end. With these industry standard protocol OAuth SSO plugin enbles WordPress SSO on WordPress site.

WordPress Single Sign-On ( WordPress SSO ) USE CASES

• Single Sign On (SSO) to one/multiple WordPress site (single/multisite) using User Credentials stored on another WordPress site with WordPress SSO plugin.
• Single Sign On (SSO) to one/multiple WordPress site (single / multisite) using User Credentials stored on your OAuth / OpenID Connect (OIDC) application with WordPress SSO plugin.
• Single Sign On ( WordPress SSO ) into WordPress using existing User stores (Active Directory/Database)
• SSO and extended plugin functionality using tokens (access_token / JWT token / id_token) such as secure API calls using third-party token
• Others: eCommerce Single Sign On (SSO)/Login & other third-party integration with SSO features

Microsoft SSO/Azure SSO
This WordPress Single Sign-on (OAuth / OpenID Connect SSO) plugin supports SSO with multiple Microsoft Apps like Azure AD SSO/Microsoft Entra ID, Azure B2C SSO, Office 365 SSO/Microsoft 365 SSO, Microsoft Dynamic CRM 365, Microsoft Teams, Windows Live that supports OAuth and OpenID Connect protocols. It supports policy-based login redirections such as sign-up policy, sign-in policy, forgot password policy, custom policy, etc.

WordPress seamlessly integrates with Microsoft services like Azure AD/Microsoft Entra ID, Azure B2C, and Office 365/Microsoft 365 for secure logins and access management across WordPress singlesite and multisite network(with subdites/subdomains). Users can perform single sign-on (SSO), profile attribute mapping, and role-based access, even across different applications and tenants.

Apart from Single Sign-on (SSO), it also supports WordPress – Azure integrations/customizations such as token-based calls to specific API / Graph API.

Cognito SSO
WordPress Single Sign-On plugin supports Login with AWS Cognito, Login with Amazon, and Login to WordPress with Cognito. Also supports user profile syncing and role mapping into WordPress, fetching tokens from AWS Cognito to make other API calls and extend the existing functionality.
It supports customization for integrating Cognito SDKs like syncing new registrations from WordPress to Cognito, Login to the site via the default WordPress login form instead of redirecting to Cognito’s login page, connecting Cognito User Pool, login redirections, and many more.

Discord SSO
This WordPress Single Sign-On plugin allows Discord login into WordPress. The other supported use cases are syncing user profiles from Discord to WordPress, Role Mapping into WordPress based on Discord roles, Role Mapping into Discord based on WordPress Role, Discord Role Mapping based membership purchased on WordPress site.

Keycloak SSO
WordPress Single Sign-On (OAuth / OpenID Connect SSO) plugin supports SSO with Keycloak. SSO plugin provide hooks to use Keycloak access token. WordPress can make REST invocations on remote services using this access token.
OAuth/OIDC SSO plugin also allows you to make authorization decisions based on role-based access control (RBAC) on the WordPress site using the role mapping feature. You can map different WordPress roles to the Users based on their Keycloak roles and capabilities.

Ping Federate SSO
The WordPress SSO (OAuth / OpenID Connect SSO) plugin allows Login to WordPress using PingFederate. The plugin provides authorized access to different Ping REST APIs using the access token/bearer token.

Clever SSO
The WordPress SSO (OAuth / OpenID Connect SSO) plugin supports login with Clever to allow users (teachers, students, district admins, etc) to access their school portal based on their roles and capabilities. It also supports integration with Learndash to sync the lessons, courses, and assignments with the Clever SSO application.

Along with Clever, it also provides support for SSO to other IDPs schools and universities use such as ClassLink, Google Classroom, Canvas, and any other application which supports OAuth or OpenID Connect protocol.

The plugin can also support WordPress Single Sign On with any Identity Provider including SAML, OAuth, OpenID Connect, Active Directory, and database using miniOrange IDP allowing your users to log in to the WP site via authenticating with their user store.

FREE VERSION FEATURES

• WordPress Single Sign-On (WordPress SSO) OAuth & OpenID Connect Login supports unlimited SSO with any 3rd party OAuth & OpenID Connect server or custom OAuth & OpenID Connect server like AWS Cognito, Azure AD, Azure AD B2C, Office 365, Google Apps, etc.
• WordPress Single Sign-On ( WordPress SSO ) Grant Support – Standard OAuth2 Grant: Authorization Code
• Auto Create Users ( User Provisioning ) : After Single Sign On (SSO), a new user automatically gets created in WordPress
• Account Linking : After SSO, if the user already exists in WordPress, then their profile gets updated. Else, a new WordPress User is created.
• Attribute Mapping : OAuth Login allows you to map your Identity Provider’s unique attribute with WordPress Username Attribute.
• Login Widget : Use Widgets to integrate the SSO/login on your WordPress site easily.
• OpenID Connect & OAuth Provider Support : WordPress Single Sign On (OAuth Login) supports any OpenID Connect & OAuth Provider.
• Redirect URL after Login : WordPress Single Sign On (OAuth Login) automatically redirects the user after successful login.
• Logging : If you run into issues, WordPress Single Sign On (OAuth Login) can be helpful to enable debug logging.

PAID FEATURES

• WordPress Single Sign-On (WordPress SSO) Grant Support: Standard OAuth2 Grants including Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant, Client Credential Grant, authorization code grant with PKCE flow, and Hybrid Grant (Customization Available)
• Auto Register Users: Automatic user registration after WordPress SSO if the user is not already registered with your site.
• Advanced Attribute Mapping: Ability to map WordPress user profile attributes, such as username, first name, last name, and email.
• Advanced Role Mapping: Assign roles to users based on defined rules.
• Force Authentication / Protect Complete Site: Protect the entire website for public users and grant access only to authenticated users through Single Sign-on (WordPress SSO).
• Custom Attribute Mapping: Map custom user attributes received from OAuth / OpenID Connect provider to any WordPress user attribute.
• Multiple OAuth & OpenID Connect Provider Support: Support for multiple providers.
• Single Login button for Multiple Apps: Provides a single login button for multiple providers.
• Extended OAuth API Support: Extend OAuth / OpenId Connect API support.
• WordPress Single Sign-On ( SSO ) Login Reports: Generate user login and registration reports based on the application used.
• Enable / Disable WordPress Default Login: Option to disable the default WordPress login form and use SSO instead.
• FrontChannel & BackChannel Single Logout Support: Allows users to be logged out from WordPress as well as IDP.
• Third-Party Plugin Compatibility for Single Sign-On (SSO): Compatible with WooCommerce and other third-party plugins.
• Add-on Support with SSO Plugin: Support for various add-ons including SCIM User Provisioning, Page & Post Restriction, BuddyPress Integration, Login Form Add-on, LearnDash Integration, Media Restriction, Attribute/Membership-Based Redirection, SSO Session Management, Paid Membership Pro Integrator, WooCommerce Integrator, SSO Login Audit, Memberpress Integration, and Guest User Login.
• No SSL Restriction: Allows login without SSL or HTTPS-enabled site using Google credentials or any other app.

POPULAR OAUTH AND OPENID CONNECT (OIDC) PROVIDERS SINGLE SIGN-ON (SSO)

The following providers support OAuth 2.0/OpenID Connect SSO for WordPress login.
* AWS Cognito SSO | Login with AWS Cognito
* Office 365 SSO | Login with Office 365
* Azure B2C SSO | Login with Azure B2C
* Azure AD SSO | Login with Azure AD
* Google Classroom SSO | Login with Google Classroom
* ClassLink SSO | Login with ClassLink
* Keycloak SSO | Login with Keycloak
* Clever SSO | Login with Clever
* Ping Federate SSO ( Ping / Ping Identity ) | Login with Ping Federate
* IdentityServer4 SSO | Login with IdentityServer4
* IdentityServer3 SSO | Login with IdentityServer3
* Discord SSO | Login with Discord
* Canvas SSO | Login with Canvas
* WordPress SSO | Login with WordPress
* WSO2 SSO | Login with WSO2
* Salesforce SSO | Login with Salesforce
* G Suite / Google Apps SSO | Login with Google
* Auth0 SSO | Login with Auth0
* OKTA SSO | Login with OKTA
* OneLogin SSO | Login with OneLogin
* Swiss-RX-Login SSO ( Swiss RX Login ) | Login with Swiss-RX-Login
* Neon CRM SSO | Login with Neon CRM
* OpenAthens SSO | Login with OpenAthens
* iMIS SSO | Login with iMIS
* HP SSO | Login with HP
* ID.me SSO | Login with ID.me
* Ticketmaster SSO | Login with TicketMaster
* MemberConnex SSO | Login with MemberConnex
* Servicenow SSO | Login with Servicenow
* Invision Community SSO | Login with Invision Community
* OpenAM / Forgerock SSO | Login with Forgerock
* Laravel Passport SSO | Login with Laravel Passport
* NextCloud SSO | Login with NextCloud
* Orcid SSO | Login with Orcid
* Memberclicks SSO | Login with MemberClicks
* Open edX / eduNEXT SSO | Login with Open edX
* SheepCRM SSO | Login with SheepCRM
* IBM APP ID SSO | Login with IBM
* Amazon SSO | Login with Amazon
* ADFS SSO | Login with ADFS
* UNA SSO | Login with UNA
* Bitrix24 SSO | Login with Bitrix24
* Slack SSO | Login with Slack
* Yahoo SSO | Login with Yahoo
* LinkedIn SSO | Login with LinkedIn
* Gitlab SSO | Login with Gitlab
* GitHub SSO | Login with GitHub
* Box SSO | Login with Box
* Apple SSO | Login with Apple
* Strava SSO | Login with Strava
* Blizzard / Battle.net SSO | Login with Battle.net
* Basecamp SSO | Login with Basecamp
* PayPal SSO | Login with PayPal
* Eve Online SSO | Login with Eve Online
* Coil SSO | Login with Coil
* VATSIM SSO | Login with VATSIM
* Intuit SSO | Login with Intuit
* Kakao SSO | Login with Kakao
* Hubspot SSO | Login with Hubspot
* X(Twitter) SSO | Login with X
* Oracle IDCS SSO | Login with Oracle IDCS
* Zoho SSO | Login with Zoho
* Idaptive SSO | CyberArk SSO | login with CyberArk
* WHMCS SSO | Login with WHMCS

OTHER OAUTH AND OPENID CONNECT (OIDC) PROVIDERS WE SUPPORT FOR WORDPRESS SINGLE SIGN-ON (SSO)

• Other oauth 2.0 and OpenId Connect ( OIDC ) 1.0 servers WordPress Single Sign-On ( SSO ) plugin support includes Office 365, AWS Cognito, Microsoft Dynamic CRM 365, Auth0, Google Workspace, Egnyte, Autodesk, Zendesk, Foursquare, Harvest, Mailchimp, Bitrix24, Spotify, Vkontakte, Huddle, Reddit, Strava, Ustream, Yammer, RunKeeper, Instagram, SoundCloud, Pocket, PayPal, Pinterest, Vimeo, Nest, Heroku, DropBox, Buffer, Box, Hubic, Deezer, DeviantArt, Delicious, Dailymotion, Bitly, Mondo, Netatmo, Amazon, FitBit, Clever, Sqaure Connect, Windows, Microsoft Live, Dash 10, Github, Invision Community, Blizzard, authlete, Keycloak, Procore, Eve Online, Laravel Passport, Nextcloud, Renren, Soundcloud, OpenAM / Forgerock, IdentityServer, ORCID, Diaspora, Timezynk, Idaptive CyberArk, Duo Security, Rippling, Crowd, Janrain, Numina Solutions, Ubuntu Single Sign-On, Apple, Ipsilon, Zoho, Stripe, Itthinx, Fellowshipone, Miro, Naver, Clever, Coil, Parallel Markets, VATSIM, Liferay, Fatsecret, Intuit, iMIS, ORY Hydra, FusionAuth, Kakao, ID.me, MoxiWorks, HR Answerlink / Support center, ClassLink, Google Classroom, MemberClicks, BankID, CSI, Splitwise, Infusionsoft, Hubspot, Join It, MyAcademicID, MemberConnex, Novi, Coassemble, Servicenow, IBM APP ID, Nimble AMS, iSpring LMS, Neon CRM, EPIC, IPB forum, Wiziq, Sprinklr, Elvanto, ABSORB LMS, Wechat, Weibo, Shibboleth, Centrify, FranceConnect, Church Online, Bigcommerce, Sewobe, PracticePanther, SubscribeStar, Eventbrite, Medi-Access, Lichess, CILogon, Servicem8, Gigya, PhantAuth, XING, Simplecast, SURF, MediaWiki, UNA, NetSuite, Oracle IDCS, …