DocCheck Login vs DocID®

Important notice: This plugin is being discontinued. The DocCheck login system based on the DocCheck CReaM platform will be shut down on June 30. From that date onward, this plugin will no longer be functional. The successor plugin, DocCheck Access https://wordpress.org/plugins/doccheck-access/, is built on the new DocCheck Access platform and replaces this plugin. Please migrate your website to the new plugin before June 30 to ensure uninterrupted authentication for your users. This plugin is no longer being developed and will no longer receive updates, security patches, or support. This open source plugin provides a solution for the technical implementation of the DocCheck login onto WordPress websites and authenticates verified healthcare professionals, thus securing your website according to the German Health Services and Products Advertising Act. Features: Login-iFrame in 4 different sizes and 6 languages (GER, EN, FR, NL, IT, ES) DocCheck login integration with shortcode Protected websites in your navigation bar can be hidden from non-authorised users Information on public websites that is subject to the German Health Services and Products Advertising Act can be hidden from non-authorised users User authentication with OAuth2 User authentication with OAuth2 provides a high security standard and is part of the paid DocCheck Economy and Business license. This is why the WordPress plugin is not available for Basic login clients. DocCheck is not the author and can therefore not provide support for this plugin. If you have questions regarding the plugin, please direct them to the support forum. If you have any questions regarding the DocCheck login service and the DocCheck licenses, you can contact the DocCheck support.

The DocID® plugin connects your WordPress website with one of the largest online networks of healthcare professionals, helping you reach a broad professional audience with relevant content. DocID® is an authentication and marketing platform designed specifically for the healthcare and pharmaceutical industry. The plugin enables WordPress site owners to define technical access restrictions for healthcare content and use verified professional attributes when evaluating access eligibility. Whether you’re presenting medical products, hosting webinars, or sharing restricted content, DocID® provides professional authentication and verification without requiring website owners to operate their own healthcare-professional identity system. The plugin supplies technical controls and configuration options. Website operators remain responsible for assessing, configuring, documenting, and operating their implementation in accordance with the legal and regulatory requirements applicable to their content, audience, jurisdiction, and use case. Features ✅ Professional Verification — Authenticate doctors, pharmacists, and other healthcare professionals and evaluate verified professional attributes for access decisions. ⚡ Instant Access — No passwords, no waiting time, no hassle. HCPs get instantly verified and immediate access to your content. 🔐 Data-Minimizing Scope Control — Request only the identity and profile attributes needed by the website, with optional data governed through configured scopes and user authorization. 🔍 User Insights & Analytics — Gain valuable insights about your audience and campaign activities. 🎯 Targeted Content — Redirect users by profession, language, or country. 📊 Campaign Management — Create campaign links, track performance, collect consents, and much more with the DocID® business modules. 🧩 WordPress-Native Integration — Protect posts, pages, custom post types, and media; add authentication-aware account navigation; and use scope-aware profile shortcodes in content and widgets. 👤 Optional Native Accounts — Provision linked WordPress users for integrations that rely on the native current user, roles, and capabilities. 🧭 Role Mapping and Login Destinations — Map verified DocID® profile attributes to non-administrative WordPress roles and configure deterministic profession- or discipline-based landing pages. Native WordPress accounts and roles Native account provisioning is optional and extends the existing DocID® authentication session. New accounts receive a deterministic non-personal username and are linked exclusively through the stable DocID® account identifier. Existing WordPress accounts are never linked by email address. Enabling email synchronization also enables the optional email scope. The WordPress admin bar can be hidden separately for provisioned DocID® users without affecting other WordPress users. Linked accounts remain federated identities and cannot use local WordPress passwords, password reset, or application passwords. Role mappings can apply to every DocID® user or match exact profession, discipline, institution, or subject values. All matching roles are combined. Synchronization adds and removes only roles managed by DocID®; roles assigned independently in WordPress remain unchanged. Administrative and user-management roles cannot be mapping targets. Login destinations can match an exact profession or discipline and point to a local WordPress URL. Lower priority numbers are evaluated first. When authentication started from protected content, the originally requested content always takes precedence over a configured profile destination. Menu links and shortcodes The WordPress menu editor provides a dynamic Login/Logout link, a Login link shown only to visitors, and a Logout link shown only to authenticated DocID® users. Each item supports WordPress’s standard editable Navigation Label. The settings page also lists all available shortcodes and the scope required for each profile value. Common examples are: [docid-account-navigation] — shows Sign in to visitors or {username} | Log out to authenticated DocID® users. The username follows the same scope-aware fallback order as [docid-username]. [docid-loggedin-content]Content[/docid-loggedin-content] — shows content only to authenticated DocID® users. [docid-loggedout-content]Content[/docid-loggedout-content] — shows content only to visitors without an authenticated DocID® session. [docid-login-link] — renders Sign in for visitors and Log out for authenticated DocID® users. Optional login_text and logout_text attributes customize both labels, for example [docid-login-link login_text="Access" logout_text="Leave"]. [docid-username] — renders the best available username: the authorized profile name; authorized email address; or a translated generic user label. [docid-profile-id] — renders the stable DocID® account identifier supplied by the required openid scope. [docid-profile-name], [docid-profile-title], [docid-profile-given-name], [docid-profile-family-name], and [docid-profile-gender] — require the optional profile scope and user authorization. [docid-profile-email] — requires the optional email scope and user authorization. [docid-profile-phone-number] — requires the optional phone scope and user authorization. Developers can inspect the current session without creating a WordPress user: $docid = new \DOCID\Includes\DOCID_Base(); $is_authenticated = $docid->docid_is_loggedin(); $identity = $docid->docid_get_user(); $account_id = is_array($identity) ? ($identity['id'] ?? '') : ''; $profession_id = is_array($identity) ? ($identity['profession_id'] ?? '') : ''; $discipline_id = is_array($identity) ? ($identity['discipline_id'] ?? '') : ''; $profession_verified = is_array($identity) ? (bool) ($identity['profession_verified'] ?? false) : false; The normalized identity contains the stable account ID and, when returned by the authorized scopes, profile, email, phone, profession_id, discipline_id, institution_id, subject_id, and professional verification data. When native provisioning is enabled, the linked WordPress user ID is available as wordpress_user_id for the current DocID® session. Additional Resources Learn more about DocID® at https://docid.de/industry. More about authentication requirements and healthcare regulations: – Login for Healthcare Professionals – German Drug Advertising Act (HWG) – German Medical Products Act Data-privacy and external Services This plugin connects to DocID® to authenticate users and confirm their professional access eligibility. It always requests the stable DocID® identifier and professional access data. Profile, email, and phone data are requested only when the website administrator enables the corresponding optional scope and are transferred only after the user grants the required authorization. The available technical controls do not constitute a guarantee of legal or regulatory compliance. Website operators are responsible for selecting appropriate scopes, establishing the required legal basis, providing applicable notices, configuring consent collection where required, and validating the complete implementation for their use case. This service is provided by 8awake GmbH: Privacy Policy, Terms of Use. DocID® is a service offer from 8awake.