Login for Google Apps by WPAuth
Login for Google Apps by WPAuth allows existing WordPress user accounts to log in to your website using Google to securely authenticate their account. This means that if they are already logged into Gmail – they can simply click their way through the WordPress login screen – no username or password is explicitly required! Login for Google Apps uses secure oAuth2 authentication recommended by Google, including 2-factor authentication (2FA) if enabled for your Google Workspace (formerly known as Google Apps and G Suite) accounts. This is far simpler to configure than the older SAML protocol. Login for Google Apps is trusted by thousands of organizations from schools to large public companies. Login for Google Apps for WordPress is the most popular enterprise grade plugin enabling login and user management based on your Google Workspace domain. Its plugin setup requires you to have admin access to any Google Workspace domain, or a regular Gmail account, to register and obtain two simple codes from Google. Support and Premium features Full support and premium features are also available for purchase: Eliminate the need for Google Workspace (previously called “Google Apps and G Suite”) domain admins to separately manage WordPress user accounts, and get peace of mind that only authorized employees have access to your organization’s websites and intranet. See our website at wp-glogin.com for more details. The Premium version allows everyone in your Google Workspace (Google Apps / G Suite) domain to log in to WordPress – an account will be automatically created in WordPress if one doesn’t already exist. Our Enterprise version goes further, allowing you to specify granular access and role controls based on Google Group or Organizational Unit membership. You can also see logs of accounts created and roles changed by the plugin. Extensible Platform Login for Google Apps allows you to centralize your site’s Google functionality and build your own extensions, or use third-party extensions, which require no configuration themselves and share the same user authentication and permissions that users already allowed for Login for Google Apps itself. Using our platform, your website appears to Google accounts as one unified ‘web application’, making it more secure and easier to manage. Google Drive Embedder is an extension plugin allowing users to browse for Google Drive documents to embed directly in their posts or pages. Google Apps Directory is an extension plugin allowing logged-in users to search your Google Apps employee directory from a widget on your intranet or client site. Google Profile Avatars is available on our website. It displays users’ Google profile photos in place of their avatars throughout your site. Login for Google Apps works on single or multisite WordPress websites or private intranets. Requirements One-click login will work for the following domains and user accounts: Google Workspace Starter Google Workspace Business Standard Google Workspace Business Plus Google Workspace Enterprise Google Workspace for Nonprofits Google Workspace for Government Google Classroom (Google Workspace for Education) Personal gmail.com and googlemail.com emails Login for Google Apps uses the latest secure OAuth2 authentication recommended by Google. Other 3rd party authentication plugins may allow you to use your Google username and password to login, but they do not do this securely unless they also use OAuth2. This is discussed further in the FAQ. Translations This plugin currently operates in multiple languages. We welcome volunteers to translate into their own language. If you would like to contribute a translation, please open the WordPress.org Translation portal. Website and Upgrades Please see our website https://wp-glogin.com/ for more information about this free plugin and extra features available in our Premium and Enterprise upgrades, plus support details, other plugins, and useful guides for admins of WordPress sites and Google Apps. The Premium and Enterprise versions eliminate the need to manage user accounts in your WordPress site – everything is synced from Google Apps instead. If you are building your organization’s intranet on WordPress, try out our All-In-One Intranet plugin.
Protect Login
Out of the box, WordPress will happily let anyone try to log in as often as they like. Type the wrong password a thousand times and it just shrugs and shows you the form again – which is exactly what someone running a brute-force script is counting on. Protect Login closes that door. It started life as a fork of Johan Eenfeldt‘s original Limit Login Attempts, a plugin a lot of us leaned on for years, and grew from there. It slows brute-force attacks to a crawl Protect Login watches failed logins per IP address. After a handful of wrong attempts that visitor has to wait before trying again, and if they keep guessing the wait grows. So a script built to try thousands of passwords ends up sitting on its hands. You decide who gets in, and who doesn’t Protect Login keeps a visible list of every address that’s currently locked out, right in the settings, and lets you release any of them with a single click. You can also keep an allowlist of addresses that skip the checks entirely (your office, your VPN’s exit node) and a blocklist of addresses that are turned away immediately. One login list, shared across all your sites If you look after more than one WordPress site – an agency, or just a small pile of your own projects — someone hammering one of them is often about to try the rest. Protect Login can link your sites together over its own Remote API: pick one site as the host, point the others at it with a URL and a key, and the block-, allow- and lockout-lists stay in sync across the lot. Block an address once and it’s blocked everywhere. And a few more things Gets the real client IP right when your site sits behind a reverse proxy or CDN — direct and proxy modes Speaks IPv6, not only IPv4 Works on Multisite, applying settings and lists across the network. Ships WP-CLI commands, so you can manage addresses and settings straight from the terminal. Lets developers set everything in code via filters — and locks the matching field in the UI, so nobody ends up fighting their own filter. Can enforce a minimum password strength for new passwords
