Casdoor – SSO, OAuth 2.0 & OIDC Login
| 开发者 | casdoor |
|---|---|
| 更新时间 | 2026年10月7日 10:11 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | Apache-2.0 |
| 版权网址: | 版权信息 |
详情介绍:
Casdoor is an open-source identity and access management (IAM) and single sign-on (SSO) platform. With this plugin your users log in to WordPress with their Casdoor account, over OAuth 2.0 and OpenID Connect, the same way they log in to the other applications of your organization.
Behind Casdoor they can use passwords, MFA, passkeys, social logins (Google, GitHub, WeChat, Microsoft and many more), LDAP, SAML or any other provider Casdoor supports, without another plugin in WordPress.
Features
- Replaces the WordPress login page with Casdoor, or adds a "Log in with Casdoor" button to it.
- Creates the WordPress user on the first login, or only lets existing users in.
- Links WordPress users to Casdoor users by the Casdoor user ID or a verified email, never by the user name alone.
- Only lets in the users of one Casdoor organization, if you want.
- Logs out of Casdoor together with WordPress.
- Optional automatic login for visitors that are not logged in.
- The
[casdoor_login_button]shortcode for a login link anywhere. - Protects the login with the OAuth
state, verifies TLS and asks Casdoor for the user, so a login can not be forged.
/wp-login.php?use_native_login=1.
Casdoor
- Website: casdoor.ai
- Source code of Casdoor: github.com/casdoor/casdoor
- Source code of this plugin: github.com/casdoor/wordpress-casdoor-plugin
安装:
- Install and activate the plugin.
- In Casdoor, create an application (or use an existing one) and add
https://your-site/?auth=casdoorto its "Redirect URLs". To log out of Casdoor together with WordPress, addhttps://your-site/too. - In WordPress, go to Settings > Casdoor SSO, enter the URL of your Casdoor server and the client ID and client secret of the application, and check "Activate".
常见问题:
Do I need a Casdoor server?
Yes. Run your own with Docker (see the Casdoor docs) or use Casdoor cloud.
I am locked out after activating the plugin.
Use the WordPress login form at /wp-login.php?use_native_login=1.
Which WordPress user does a Casdoor user log in as?
The WordPress user that is linked to the Casdoor user, the one that logged in with this Casdoor user before, or the one with the same email when Casdoor has verified the email. Otherwise a new WordPress user is created, unless "Existing users only" is checked. The admins of the organization in the "Organization" setting become WordPress administrators.
Can I change where users go after logging in?
Yes, with the casdoor_user_redirect_url filter. The casdoor_user_login and casdoor_user_created actions run after a login and after a new user is created.
更新日志:
See the releases on GitHub.