WordPress.org

Having a single login for every service is a must in large organizations. This plugin allows you to integrate WordPress with LDAP quickly and easily. Like, really really easy.

Donate?

If you use this plugin, and find that it serves your organization's needs, please consider a donation. I have spent many unpaid hours supporting and updating this plugin. A plugin like this would easily retail for $200 or more. I offer it for free, with only the request that you consider giving back if you are financially capable of doing so.

Support

If you need support, I recommend you leave a comment on the appropriate post on my blog: http://clifgriffin.com/2009/05/13/simple-ldap-login-13-for-wordpress/

Special Requests

If you need a customization or change specific to your install, I am available for hire. Shoot me an e-mail: clifgriffin[at]gmail.com

Features

• Supports Active Directory and OpenLDAP (and other directory systems which comply to the LDAP standard, such as OpenDS)
• Supports TLS
• Uses up-to-date methods for WordPress authentication routines.
• Includes three login modes:
• • Normal Mode: Authenticates existing wordpress usernames against LDAP. This requires you to create all WordPress accounts manually using the same user names as those in your LDAP directory.
• • Account Creation Mode 1: Creates WordPress accounts automatically for any LDAP user.
• • Account Creation Mode 2: Creates WordPress accounts automatically for LDAP users in a specific Group you specify.
• Intuitive control panel.

Architecture

Simple LDAP Login adds an authentication filter to WordPress that authentication requests must pass. In doing so, it makes several decisions.

• Can the provided credentials be authenticated against LDAP?
• • If so, is the username a valid WP username?
• • • If not, can we create a WP user?
• • • • If we can, does the user belong to the right (if any) group?
• • • • • If the user does, create the WordPress user and log the user in.
• • If the username is already valid wordpress user, are they in the right group?
• • • Is so, log the user in.

This is simply a high level overview. The actual logic the plugin employs is more complex, but hopefully this gives you an idea, philosophically, about how the plugin accomplishes what it does. If the plugin is unable to authenticate the user, it passes it down the chain to WordPress. (Unless security mode is set to high, which will disable this functionality.)