Dorvis Auth

You must contact Dorvis support or use the demo credentials provided in the documentation.

Turn off Create accounts automatically. Existing users sign in with their password, open their profile and click Link Dorvis identity. The Users list shows who has linked. Once everyone has, turn on Disable password sign-in.

Turn on Match accounts by personal code, then set the dorvis_personal_code user meta field on each account to that person's code, digits only with no dashes or spaces. Those users can sign in with Dorvis straight away. The Users list shows them as Pending until they first sign in, so a mistyped code is visible before anyone is locked out. Accounts that were already linked before the setting was turned on keep working, and their personal code is filled in the next time they sign in. dorvis_personal_code is the only user meta field meant to be written by hand. Setting dorvis_sub directly also links an account, but the plugin then treats it as one it created and overwrites its name and public URL slug from Dorvis on the next sign-in.

Define DORVIS_AUTH_ALLOW_PASSWORD_LOGIN as true in wp-config.php.

No. Signing in with Dorvis establishes the WordPress session directly, so plugins that add a second factor to the username and password form are not part of that path. The second factor is whatever the Dorvis identity provider asks for.

given_name and family_name become the user's name fields and display name, and the name also becomes the public URL slug. person_code is stored as the dorvis_personal_code user meta field; it is never used as the username. This mapping is applied on every sign-in to accounts the plugin created. An account that already existed on the site when it was linked keeps the name and public URL slug the site gave it.