OAuth Single Sign On - SSO (OAuth Client)byminiOrange

This plugin allows login (Single Sign On) into WordPress with your Azure AD, Azure B2C, AWS Cognito, WSO2, Okta, LinkedIn, Invision Community, Slack, Discord or other custom OAuth 2.0 / OpenID Connect providers. WordPress OAuth Client plugin works with any Identity provider that conforms to the OAuth 2.0 Server and OpenID Connect (OIDC) 1.0 standard.
It also covers User Authentication with OAuth & OIDC protocol and allow authorized user to login into WordPress site.

Single Sign-On(SSO)

In simple term, Single Sign-On(SSO) means login into 1 site / application using the credentials of another app/site.
Example. If you have all your Users/Customers/Members/Employees stored on 1 site(ex. gmail, wordpress, etc.), lets say site A and you want all of them to register/login into your WordPress site say site B. In this scenario, you can register/login all your users of site A into Site B using the login credentials/account of Site A. This is call Single Sign-On or SSO.

Third Party Application / OAuth-OIDC Provider

• The other terms are: OAuth Provider, OAuth Server, OpenID Connect Server, OpenID Connect Provider, OIDC Provider, OIDC Server, OAuth Application, OpenID Connect Application, OIDC Application, OpenIDConnect Server, OpenIDCConnect Provider, OpenIDConnect Application
• This Third Party Application can be anything where User Accounts are stored or site/application where you want to store/migrate all the users. It can be your social app/site, wordpress, custom app or any database.

USE-CASES

• Single Sign-On between WordPress – WordPress(Login with WordPress) :
  1. Single Sign-On to 1 WordPress site using User Credentials stored on Another WordPress site
  2. Single Sign-On to 1 / multiple WordPress sites (or subsites) using User Credentials stored on Another WordPress site
• Single Sign-On between WordPress and Any OAuth / OpenID Connect (OIDC) application(Login with Social Login Apps / Custom Providers) :
  1. Single Sign-On to 1 WordPress site using User Credentials stored on your third party application
  2. Single Sign-On to 1 / multiple WordPress sites (or subsites) using User Credentials stored on Another WordPress site
• Single Sign-On into WordPress Using existing User stores(Active Directory/Database)

FREE VERSION FEATURES

• WordPress OAuth Login supports single sign-on / SSO with any 3rd party OAuth / OpenIDConnect server or custom OAuth / OpenIDConnect server.
• Auto Create Users : After SSO, new user automatically gets created in WordPress
• Account Linking : After user SSO to WordPress, if user already exists in WordPress, then his profile gets updated or it will create a new WordPress User
• Attribute Mapping : OAuth Login supports username Attribute Mapping feature to map WordPress user profile username attribute.
• Login Widget : Use Widgets to easily integrate the login link with your WordPress site
• OpenID Connect / OAuth Provider Support : OAuth Login supports only one OpenID Connect / OAuth Provider.
• Redirect URL after Login : OAuth Login Automatically Redirects user after successful login.
• Logging : If you run into issues OAuth Login can be helpful to enable debug logging

STANDARD VERSION FEATURES

• All the FREE Version Features included.
• Optionally Auto Register Users : OAuth Login does automatic user registration after login if the user is not already registered with your site
• Basic Role Mapping : OAuth Login provides basic Attribute Mapping feature to map WordPress user profile attributes like username, firstname, lastname, email and profile picture. Manage username & email with data provided.
  Also, Assign default role to user registering through OAuth Login based on rules you define.
• Support for Shortcode : Use shortcode to place OAuth login button anywhere in your Theme or Plugin
• Customize Login Buttons / Icons / Text : Wide range of OAuth Login Buttons/Icons and it allows you to customize Text shadow
• Custom Redirect URL after Login : WordPress OAuth SSO provides auto redirection and this is useful if you wanted to globally protect your whole site
• Custom Redirect URL after logout : WordPress OAuth SSO allows you to auto redirect Users to custom URL after he logs out from your WordPress site

PREMIUM VERSION FEATURES

• All the STANDARD Version Features
• Advanced Role Mapping : Assign roles to users registering through OAuth Login based on rules you define.
• Force Authentication / Protect Complete Site : Allows user to restrict login / authorization for particular site
• Multiple Userinfo Endpoints Support : OAuth Login supports multiple Userinfo Endpoints.
• App domain specific Registration Restrictions : OAuth Login restricts registration on your site based on the person’s email address domain
• Multi-site Support : OAuth Login have unique ability to support multiple sites under one account

ENTERPRISE VERSION FEATURES

• All the PREMIUM Version Features
• Multiple OAuth / OpenID Connect Provider Support
• Single Login button for Multiple Apps : It provides single login button for multiple providers
• Extended OAuth API support : Extend OAuth API support to extend functionality to the existing OAuth client.
• BuddyPress Attribute Mapping : OAuth Login allows BuddyPress Attribute Mapping.
• Page Restriction according to roles : Limit Access to pages based on user status or roles. This WordPress OAuth Login plugin allows you to restrict access to the content of a page or post to which only certain group of users can access.
• WP Hooks for Different Events : Provides support for different hooks for user defined functions
• Login Reports : OAuth Login creates user login and registration reports based on application used.

No SSL restriction

• Login to WordPress (WordPress SSO) using Google credentials (Google Apps Login) or any other app without having an SSL or HTTPS enabled site.

List of popular OAuth Providers we support

• Azure AD
• AWS Cognito
• WHMCS
• Ping Federate
• Slack
• Discord
• HR Answerlink / Support center
• WSO2
• Wechat
• Weibo
• LinkedIn
• Gitlab
• Shibboleth
• Blizzard (Formerly Battle.net)
• servicem8
• Meetup
• Eve Online
• Gluu Server
• WSO2
• NetIQ
• Centrify
• Azure AD
• Azure B2C

List of popular OpenID Connect (OIDC) Providers we support

• Amazon
• Salesforce
• PayPal
• Google
• AWS Cognito
• Okta
• OneLogin
• Yahoo
• ADFS
• Gigya
• Swiss-RX-Login (Swiss RX Login)
• Azure AD
• Azure B2C

List of grant types we support

• Authorization code grant
• Implicit grant
• Resource owner credentials grant (Password Grant)
• Client credentials grant
• Refresh token grant

Other OAuth / OpenID Connect Providers we support

• Other oauth 2.0 servers oauth single sign-on plugin support includes Autodesk, Zendesk, Foursquare, Harvest, Mailchimp, Bitrix24, Spotify, Vkontakte, Huddle, Reddit, Strava, Ustream, Yammer, RunKeeper, Instagram, SoundCloud, Pocket, PayPal, Pinterest, Vimeo, Nest, Heroku, DropBox, Buffer, Box, Hubic, Deezer, DeviantArt, Delicious, Dailymotion, Bitly, Mondo, Netatmo, Amazon, FitBit, Clever, Sqaure Connect, Windows, Dash 10, Github, Invision Community, Blizzar, authlete, Keycloak, Procore, Eve Online, Laravel Passport, Nextcloud, Renren, Soundcloud, OpenAM, IdentityServer etc.

Supported Add-ons

1. Page Restriction
2. BuddyPress integrator
3. Login Form Add-on
4. Membership Level based Login Redirection

REST API Authentication

Secures the unauthorized access to your WordPress sites/pages using our WordPress REST API Authentication plugin.