Skip to content
  • Log In
  • Register
WordPress.org

Tigrigna

  • Themes
  • Plugins
  • About
  • Contact
  • Get WordPress
Get WordPress

Plugins

  • My Favorites
  • Beta Testing
  • Developers

This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

Download

JWT Single Sign On

By seschi98
  • Details
  • Reviews
  • Installation
  • Development
Support

Description

This plugin allows signing in users via JSON Web Token (JWT) in WordPress. It is used to allow users from another website/service/etc. to securely use their credentials for the WordPress site.
Sample use case: There is an existing user database (e.g. in an intranet environment) and the users should be able to login to an external site that is powered by wordpress, without having to remember another password. This mechanism is also called Single Sign On (SSO).
Please note that the user information and role mappings are updated each time the user logs in via SSO. If you do not want to sync the roles from your existing system to wordpress, you can disable the functionality via the settings page.

JWT Server

You will need to implement an endpoint on your website/app that has access to the logged
in user (via login form or Kerberos-like authentication etc). That endpoint needs to create
and sign a JWT with the HS256 algorithm and the below described information in the payload.
It then has to redirect the user back to the WordPress site https://example.org/?auth=jwt&code={jwt}
where {jwt} is the signed JWT as string representation.

{
“iat”: 1516239022,
“iss”: “issuer_name”,
“user_info”: {
“user_login”: “johndoe”,
“user_name”: “John Doe”,
“first_name”: “John”,
“last_name”: “Doe”,
“user_email”: “johndoe@example.org”,
“user_roles”: [“role1”]
}
}

Installation

  1. Upload the downloaded plugin folder to the /wp-content/plugins/ directory
  2. Activate the plugin through the ‘Plugins’ menu in WordPress
  3. In the administration dashboard, go to “Settings” > “Single Sign On” and configure the JWT settings.

FAQ

Where can I configure the plugin?

In the administration dashboard, go to “Settings” > “Single Sign On”.

Can I request a feature?

Yes! You can create an issue on GitHub. The repository can be found under https://github.com/seschi98/wordpress-jwt-single-sign-on

Reviews

Great start for new JWT plugin

dragonword ሰነ 3, 2019
Using on my site and excited with it so far. It does what it says on the tin, although there are a few drawbacks: - When activated, no users are able to log out - Documentation lists auth url parameter as 'jwt', but it should be 'sso' - Would be nice if the wordpress login page could automatically redirect to SSO page, or maybe just have a 'continue to SSO' button with the default form hidden until you click 'I am an admin' or something else to use the native auth. Current display means people will try logging in and then click the SSO button, which is a bit confusing. - It is keyed off username AND e-mail. Email is not a great thing to key off since it may change in future if user changes their email in either SSO site or wordpress site. Also, in my case, users can have multiple accounts with identical e-mail. So an option to only key off username only (which cannot be changed in stock wordpress) would be ideal. That said, having JWT auth is very useful and am much appreciative for this plugin! I am really excited to follow this plugin's development, and hope it continues to improve in future too 🙂
Read all 1 review

Contributors & Developers

“JWT Single Sign On” is open source software. The following people have contributed to this plugin.

Contributors
  • seschi98

Translate “JWT Single Sign On” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.2.0

  • Adding some validation so that default values for new plugin settings are automatically populated when a plugin update is performed.
  • Adding the possibility to disable the SSO button on the login page.

1.1.1

  • Fixing the plugin name in readme.txt so it is compliant to the WordPress specification

1.1.0

  • Updating readme file to provide more information
  • Updating admin settings page to give more information about the setup process
  • Removed dependecy for jQueryUI CDN
  • Adding a proper readme.txt file for WordPress Plugin Directory
  • Adding the ability to control whether the clientId and site’s SSO address should be appended to the JWT Server URL
  • Adding the ability to disable role synchronisation

1.0.0

  • Initial Proof-Of-Concept for this plugin.

Meta

  • Version: 1.2.0
  • Last updated: 4 years ago
  • Active installations: 20+
  • WordPress Version: 3.0.1 or higher
  • Tested up to: 5.1.15
  • PHP Version: 5.2 or higher
  • Language:
    English (US)
  • Tags:
    jwtloginSingle Sign-onsso
  • Advanced View

Ratings

See all
  • 5 stars 0
  • 4 stars 1
  • 3 stars 0
  • 2 stars 0
  • 1 star 0
Log in to submit a review.

Contributors

  • seschi98

Support

Issues resolved in last two months:

0 out of 1

View support forum

  • About
  • News
  • Hosting
  • Donate
  • Swag
  • Documentation
  • Developers
  • Get Involved
  • Learn
  • Showcase
  • Plugins
  • Themes
  • Patterns
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
WordPress.org
WordPress.org

Tigrigna

  • Visit our Facebook page
  • Visit our Twitter account
  • Visit our Instagram account
  • Visit our LinkedIn account
Code is Poetry.