IntranetOS Employee Intranet with Entra ID

Description

IntranetOS Employee Intranet with Entra ID connects your WordPress site to Microsoft 365 and gives your team a modern intranet — no per-user fees, no locked features, no upsells inside the plugin.

🔐 Microsoft Entra ID Single Sign-On

• “Sign in with Microsoft” button on wp-login.php (OAuth2 + PKCE)
• Automatic account matching and creation — new accounts always start as Subscriber
• B2B guest accounts are matched to their real email, never duplicated
• Optional: force Microsoft sign-in for linked accounts, and sign out of Microsoft on WordPress logout
• Built-in connection test with clear, human-readable error guidance

👥 Employee Sync + Directory

• Pull users from Microsoft Entra ID via Microsoft Graph delta sync (incremental — later syncs only process changes, including removals)
• Optional WordPress account provisioning for synced employees
• Front-end directory with [eicp_employee_directory] (filter by department, 2–4 columns)
• Auto-sync every 15 minutes via WP-Cron (optional)

🔎 Unified Intranet Search

• One search box across pages, posts, synced people and the FAQ knowledge base: [eicp_unified_search]
• Optionally redirects the theme’s native search for logged-in users
• ElasticPress integration when that plugin is installed

🎉 Engagement Pack (100% local — no Microsoft tenant needed)

• [eicp_announcements] — company news with pinning
• [eicp_kudos_wall] — peer recognition with email notification
• [eicp_polls] — quick polls with one vote per employee and live results
• [eicp_celebrations] — birthdays and work anniversaries, today and this month
• [eicp_faq] — categorized knowledge base
• [eicp_my_day] — personal daily dashboard combining all of the above
• Engagement Hub admin screen to publish and moderate everything

🧱 Intranet Blocks + One-Click Setup

• Six Gutenberg blocks: News Card, Event Grid, Quick Action Tiles, Document Accordion, Portal Carousel, Employee Directory Card
• One-Click Intranet Setup wizard: generates Intranet Home (portal with quick tiles), My Day, Directory, News, Search, Kudos, Polls, Celebrations and FAQ pages plus an “Intranet” navigation menu — idempotent, never duplicates your pages
• Dark IntranetOS page style: applies automatically to any page containing a plugin shortcode, or per-page via the editor sidebar checkbox

Privacy-friendly: your Microsoft client secret is stored AES-256-GCM encrypted in your own database. This plugin never phones home and sends no data to the plugin author.

A separate commercial edition with SharePoint, Power BI and Service Desk connectors is available at intranetos.com. It is not required for any feature of this plugin.

External services

This plugin connects to the following Microsoft services. No other external service is contacted; no data is sent to the plugin author or any third party.

Microsoft identity platform (login.microsoftonline.com) — used for Entra ID single sign-on: tenant discovery (OpenID configuration), authorization redirects when an employee clicks “Sign in with Microsoft”, token exchange/refresh, and the optional Microsoft logout redirect. Data sent: your Tenant ID, Client ID and Client Secret, the OAuth authorization code, and sign-in state tokens. Data received: ID/access tokens and the signed-in user’s profile.
Terms: Microsoft Services Agreement · Microsoft identity platform terms · Privacy Statement

Microsoft Graph API (graph.microsoft.com) — used to read the signed-in user’s profile (/me) during login, and — only when you enable Employee Sync — to read your tenant’s user list (/users/delta: name, job title, department, email) into the plugin’s local directory table. Data sent: OAuth access tokens. Data received: user profile and directory data, stored in your own WordPress database.
Terms: Microsoft Graph API Terms of Use · Privacy Statement

The admin settings page also links to portal.azure.com for the one-time app registration; this is a documentation link only — the plugin makes no calls to it.