WordPress + Office 365 login premium

This plugin offers the same set as features as the free version, plus:

  • Creating and adding unlimited Office 365 users
  • Enriches a user’s WordPress profile with O365 user profile info e.g. job title, phone and office location
  • Enhanced security e.g. Brute Force Attacks prevention
  • Replaces a user’s default WordPress avatar with the Office 365 (O365) profile picture and caches it
  • Imposes Role Access Control for WordPress based on Office 365 or Azure AD Security groups
  • Automated WordPress Role Assignment using a configurable mapping between Office 365 or Azure AD Security groups and WordPress roles
  • Plain WP_CONFIG configuration (improves the overall performance of your website)
  • Integration with Microsoft Graph
  • One support item included

WordPress + Office 365 login

WordPress + Office 365 login allows Microsoft O365 users to seemlessly and securely log on to your corporate WordPress intranet: No username or password required! The plugin offers the following features:

  • As a Wordpress Administrator you can choose between two scenarios: ‘Intranet’ or ‘Internet’
  • In both scenarios, users will be automatically logged on after they have successfully authenticated with Azure Active Directory / Office 365.
  • And in case the user does so for the very first time, the plugin will create a corresponding new WordPress user for the first three Office 365 users
  • Still, when a user would navigate to the default Wordpress login page, he or she can still log on using a Wordpress-only account.
  • To keep things save, the plugin will by default prevent Office 365 users to change their email address.
  • The plugin will also prevent Office 365 users to request a new password.
  • After a certain time – by default 1 hour – the plugin will try and refresh the authentication.

blog posts

Intercept manual logins

When checked, the plugin will intercept any login attempt and check whether the user name entered in the login form is a valid Office 365 Azure AD user name. If yes, the plugin will forward the login request to Microsoft instead.

Pages Blacklist

The plugin will skip session validation for pages (without host or path) entered here. For example, the wp-login.php entry in this list makes it possible that you can still navigate to the default WordPress login page and logon using a WordPress-only account.

Goto after

An absolute URL where Office 365 users, who attempted to sign in manually, will be redirected to after successfully signing in with Microsoft.

User cannot change password

When checked, the plugin won’t allow users that are not administrators to change their passwords.

User cannot change email address

When checked, the plugin will intercept any attempt by the user to change his/her email address and prevent it.

Application Secret

Optionally, the plugin retrieves additional Office 365 user fields and a user’s profile phoot by calling the Microsoft Graph. To be able to do so, you will need to create an App Key for your registered app in the Azure Portal.

Authentication scenario

Select ‘Intranet’ to secure both WordPress front- and backend and ‘Internet’ to secure only the backend with WPO365-login.

Your (own) domain

This settings is used to determine whether a user is an Office 365 user or not, assuming that the user’s login name is equal to the User Principal Name which is equal to the user’s email address.

Show O365 user fields

When checked, the plugin will retrieve additional fields e.g. Job Title, Office Location, Mobile Phone and Business Phone Numbers from Microsoft Graph and adds these to a new “Office 365 Profile Information” user profile section.

Nonce Secret

A nonce is a “number used once” and is used to test the integrity of requests sent by the plugin to Microsoft.

Domain Whitelist (WordPress Multisite)

The plugin will only grant access to users from whitelisted domains.

Redirect URI

The Reply URL together with the Application ID and optionally with an App Key are used by Azure Active Directory to authenticate requests that come from your WordPress application. It is also used by Microsoft to redirect the user after that user successfully signed into your WordPress website using Microsoft.

Scope (Open Connect ID)

The scope “openid” is defined by the Open Connect ID oauth protocol and is required when the intend is to obtain a user’s ID token the moment that user signs into your WordPress website.

Default Resource ID

This ID identifies Azure Active Directory as the resource that a user who wants to sign into your (WordPress) website requires delegated permissions to, when signing into your website.

Default Domain

This settings is used to determine whether a user is an Office 365 user or not, assuming that the user’s login name is equal to the User Principal Name which is equal to the user’s email address.