Follow for free plugins, new theme releases and theme news
Plugin Description
Features | Setup Guide | Documentation | Integrations | Contact Us
Active Directory Integration / LDAP Integration Login for Intranet Sites plugin allows you to authenticate your users using their Active Directory/LDAP credentials into your WordPress site. It helps map the Active Directory/LDAP attributes to the WordPress user profile attributes and also lets you assign WordPress roles to your LDAP/Active Directory users. Additionally, the plugin has a user authentication report feature, which logs each unsuccessful Active Directory/LDAP authentication request, providing additional security functionalities.
This plugin allows users to authenticate against various Active Directory /other LDAP Servers including but not limited to:
- Microsoft Active Directory
- Azure Active Directory
- Sun Active Directory
- OpenLDAP Directory
- JumpCloud
- FreeIPA Directory
- Synology
- OpenDS and other LDAP directories.
How the Plugin Works:
Plugin
LDAP/Active Directory Login for Intranet Sites Plugin
LDAP/Active Directory login for Intranet Sites Premium Plugin
LDAP/Active Directory login for Intranet Sites Premium Plugin for Multisite
LDAP/Active Directory login for Cloud/Shared Hosting Plugin
Add Ons
Kerberos Single Sign On (SSO)
Sync User LDAP Directory
Profile Picture Sync for WordPress and BuddyPress
Search Staff/Employee from LDAP Active Directory
Password Sync with LDAP Server
Minimum Requirements
Get a quick overview of our product
Features of the AD Integration/ LDAP Integration Login for Intranet Sites Plugin
The LDAP/Active Directory Login for Intranet sites plugin includes user management features as well, such as adding users from Active Directory or another LDAP Directory who are not registered in WordPress, WordPress role mapping, LDAP/Active Directory to WordPress attribute mapping, and more. We also provide additional add-ons that enhance the functionality of the basic plugin such as enabling Kerberos/NTLM SSO Authentication, importing users from Active Directory/LDAP Server to WordPress, creating users in Active Directory/LDAP server when created/registered in the WordPress site, sync users between the Active Directory/LDAP server and WordPress site, sync LDAP/Active Directory Profile Picture thumbnail attribute to WordPress user profile picture, AD integration with third-party plugins and more.
What is Kerberos/NTLM Single Sign On (SSO)
Effortlessly enable Single Sign-On (SSO) within your Active Directory-secured intranet using Kerberos/NTLM authentication. Enjoy passwordless login for domain-joined machines and enhanced security through restricted external access. With cross-platform compatibility, Kerberos authentication across Windows is also ensured. Kerberos authentication can also be done access Ubuntu, CentOS, and RHEL, protecting against unauthorized access and impersonation threats. You can also configure Kerberos/NTLM SSO with Apache on Windows.
Benefits of Kerberos Authentication Protocol
Secure Authentication: Strong cryptography ensures safe access to systems and resources.
Mutual Authentication: Verifies both client and server identities to prevent impersonation.
Cross-Platform Compatibility: Supports diverse operating systems and applications for broad SSO adoption.
Free Version Features:-
- LDAP/AD Login into WordPress: Perform LDAP Authentication for any user trying to log into the WordPress website whose Active Directory/LDAP credentials are stored in the Active Directory/LDAP server. Additionally, logging in with WordPress credentials is also supported.
- Sync Active Directory User Profiles: Upon authentication, keep the WordPress User’s profile information in sync with the Active Directory/other LDAP Directories.
- Automatic User Registration in WordPress: Automatically create WordPress users who are present in the LDAP server/Active Directory upon login.
- Role Mapping: You can select a default WordPress role and assign it to all the Active Directory/LDAP users while LDAP/AD login (Active Directory Login) is performed.
- Attribute mapping: Map the LDAP/Active Directory mail attribute to the WordPress user email and sync upon every successful LDAP/Active Directory Login (AD Login).
- LDAPS (LDAP Secure Connection) support:Supports establishing Secure Connection between the WordPress site and Active Directory/LDAP server via LDAPS protocol, this ensures protection against credential theft.
- Authentication Report: Keep logs of all the Active Directory/LDAP users who try to authenticate on your WordPress website and fail. A lot of the time these are security risks. The LDAP User Authentication report will give you a list of these users, you can also export a CSV of this report.
- Automatic fetching of LDAP Organizational Units from LDAP Server/Active Directory while configuring Search Base for LDAP/AD Login (Active Directory Login).
- Test connection to your Active Directory/other LDAP Directory while configuring LDAP server information in the plugin.
- Test authentication using credentials stored in your Active Directory/other LDAP Directory after configuring LDAP server information in the plugin.
- Ability to test against demo Active Directory/other LDAP Directory and demo credentials. You can do this using the demo LDAP Directory credentials from here.
- Support Integration with hybrid Active Directory infrastructure.
- Compatible with the latest versions of WordPress and PHP.
- We provide extensive easy-to-understand documentation as well as YouTube setup videos which will assist you while configuring our LDAP Active Directory plugin.
You can find out how to configure the (AD Integration) Active Directory Integration / LDAP Integration plugin through the video below
This LDAP/Active Directory Login (AD Login) plugin is free to use under the MIT/Expat license. If you wish to use enhanced features, you may purchase our Premium version. We also provide additional add-ons that enhance the functionality of the basic WordPress LDAP/AD Login plugin. This will help support further development of our LDAP plugin, and in turn, serve our customers better.
= Premium Version Features=
- Our premium plugin includes additional features, as well as the aforementioned free plugin features.
- Login With Any LDAP Attribute Of Your Choice: Authenticate users against multiple LDAP/Active Directory username attributes like sAMAccountName, UID, UserPrincipalName, mail, cn, or any other custom LDAP attribute(s) according to your LDAP Active Directory/any other LDAP directory.
- Auto-register of LDAP users in WordPress site: Allows users of Active Directory/other LDAP Directory to auto-register in WordPress.
- Advanced Role Mapping: Assign specific WordPress roles based on the LDAP/Active Directory group memberships or the Organizational Units that are set in the LDAP Server/Active Directory. You can also assign a default WordPress role to all the LDAP/Active Directory users.
- Fetch LDAP groups automatically for Role Mapping: Fetches the LDAP/AD Security Groups present in your Active Directory/other LDAP Directory.
- Attribute Mapping: Configure and fetch the LDAP/AD attributes such as UID, cn (common name), mail, telephoneNumber, givenName, sn, sAMAccountName, and map with WordPress user profile attributes upon LDAP/AD Login (Active Directory Login).
- Custom Attribute Mapping: You can create your own WordPress custom user profile attributes which is a nifty tool if your organization has various attributes present in the Active Directory/LDAP server.
- Custom Search Filter: Allows you to restrict user authentication on the basis of LDAP/Active Directory security groups, userAccountControl etc.
- Authenticate Users from Multiple LDAP Search Bases: Authenticate users against multiple search bases from your Active Directory/other LDAP Directory.
- Automatic LDAP/Active Directory Users Search Base Selection: Fetches and allows you to select the Organization Unit (OU) present in your Active Directory/other LDAP Directory for the user’s search base.
- Multiple LDAP Directories Configuration: Perform LDAP/Active Directory authentication against multiple directories through sequential search or on the basis of domain membership.
- WordPress to LDAP User Profile Sync: Update/Sync the user profile in Active Directory/other LDAP Directory when updated from WordPress.
- Authenticate users from LDAP and WordPress: Enable all WordPress users or WordPress administrators to log in even if they are not present in the LDAP/Active Directory.
- Redirect to Custom URL after Authentication: Redirect to WordPress Profile page/ Home page/ Custom URL after successful LDAP/Active Directory authentication.
- Detailed User Authentication Report: Keep track of user’s authentication requests for your WordPress site. Get detailed logging information for FAILED LDAP Authentication of individual users.
- Support for Import/Export Plugin Configuration: Export your LDAP plugin configuration from the staging/testing site and import it to the production/live site. This will save you the hassle of reconfiguring the LDAP plugin.
- Multisite Support: The plugin supports LDAP/AD Login integration for multisite environments as well.
- Restrict login based on WordPress roles: Restrict LDAP/Active Directory login (AD Login) to certain users based on the roles that are assigned on WordPress.
- Provides seamless AD integration with third-party plugins such as BuddyBoss, BuddyPress, Ultimate Member, Gravity Forms, Groups, and eMember.
You can find out Active Directory Integration / LDAP Integration Premium Version Features through the video below
= Add-ons List=
- Active Directory Single Sign-On (SSO) using Kerberos/NTLM: Enable Active Directory SSO (auto-login) on your WordPress site for Domain Joined Machines using Kerberos/NTLM SSO protocol. This supports Kerberos SSO authentication for Linux with Apache server, Windows authentication on IIS server, Windows with Apache server, etc. We also support Active Directory SSO solutions using the GSSAPI module as well.
- Sync Users LDAP Directory: Sync/Import WordPress users from Active Directory/other LDAP directory. Schedules can be configured for the synchronization to run at a specific time and after a specific time interval. Additionally, you can also enable WordPress to LDAP/Active Directory user sync which would enable you to update/create an LDAP/AD user’s profile.
- Sync BuddyPress Extended Profiles: Update the BuddyPress users extended profiles with Active Directory/LDAP Server attributes upon LDAP/AD login (Active Directory Login).
- Password Sync with Active Directory/LDAP Directory: Update your Active Directory/other LDAP Directory user password, the WordPress password of LDAP users will be synced to the LDAP server when you update or reset it in WordPress.
- Profile Picture Sync for WordPress and BuddyPress: Update your WordPress and BuddyPress profile picture with thumbnail photos stored in your Active Directory/other LDAP Directory or vice-versa.
- Ultimate Member Login and Profile Integration: Enable LDAP/AD Login for the Ultimate Member Login form and map Active Directory / other LDAP Directory User Profile attributes with ultimate member profile page.
- Page/Post Restriction: This allows you to control access to your site’s content (pages/posts) based on LDAP groups/WordPress roles.
- Search Staff From Active Directory/other LDAP Directory: Search and display your Active Directory/other LDAP Directory users on your website page using a search widget and shortcode.
- Third-Party Plugin User Profile Integration: Update user profiles created using any third-party plugin with information from your Active Directory/other LDAP Directory stored in WordPress user meta table.
- Gravity Forms Integration: Populate Gravity Form fields with information from Active Directory / other LDAP Directory. You can do AD integration with unlimited forms.
- Sync BuddyPress Groups: Assign BuddyPress groups to users based on LDAP/AD group membership in Active Directory / other LDAP Directory.
- MemberPress Plugin Integration: Login to MemberPress-protected content with Active Directory / other LDAP Directory Credentials.
- eMember Plugin Integration: Login to eMember profiles with Active Directory / other LDAP Directory Credentials.
- WP Groups Plugin Integration: Assign users to WordPress groups created using the Groups plugin based on their LDAP/ Active Directory (AD) group memberships present in the Active Directory / LDAP Server. You can map any number of Active Directory groups with WordPress groups.
- With authentication being one of the essential functions of the day, fast and priority support (provided in paid versions) ensures that any issues you face on a live production site can be resolved on time.
- Regular updates to the premium plugin are compatible with the latest WordPress version. The updates include security and bug fixes. These updates ensure that you are updated with the latest security fixes.
- Ensure timely updates for new WordPress/PHP releases with our premium plugins and compatibility updates to make sure you have adequate support for smooth transitions to new versions of WordPress and PHP.
- Reasonably priced with various plans tailored to suit your needs.
- Easy to setup with lots of support and documentation to assist with the setup.
- High level of customization and add-ons to support specific requirements.
Use Cases
Enable SSO for Multiple Active Directory Users on Domain-Joined Machines with Kerberos/NTLM
Streamline the auto-login experience for your WordPress sites accessed from domain-joined machines across multiple Active Directories. Our miniOrange LDAP/AD Login for Intranet Plugin, combined with the Kerberos NTLM SSO Add-on, ensures secure, seamless Single Sign-On while restricting content access to authorized AD users only. Ensure robust access control and a frictionless user experience with this powerful integration.
Enable MFA for External Access After LDAP Kerberos SSO
In addition to providing seamless Kerberos NTLM SSO for Active Directory users within your intranet, our solution also ensures secure access for users outside the intranet or connecting via VPN. With the LDAP Kerberos SSO setup, access is granted only after an additional layer of security through 2-factor Authentication (2FA) or Multi-Factor Authentication (MFA). This enhances protection, verifying user identity before granting access to sensitive website content from external networks.
Map LDAP/AD Groups and Attributes to WordPress User Profiles
Map LDAP/Active Directory groups and attributes from various LDAP servers to WordPress user roles, ensuring seamless profile updates within WordPress. With this feature, administrators can automatically assign WordPress roles based on LDAP/AD group memberships, while also utilizing LDAP attributes to meet specific business needs. This powerful integration enables streamlined role assignments and consistent synchronization between LDAP/AD and WordPress, enhancing user management across your site.
Automate LDAP/Active Directory Sync with WordPress for Seamless User Management
Sync or import user data from LDAP/Active Directory into WordPress to create a unified and user-friendly experience. With the Advanced Syncing Add-on, you can synchronize user information, including profile pictures, and offer a self-service password reset console directly on your WordPress site. The plugin also supports scheduled syncs, ensuring efficient, consistent, and up-to-date user data management. This automation streamlines user profile updates and enhances overall site administration.
Enable Multi-LDAP Directory Support for WordPress Authentication and Synchronization
Authenticate, authorize, and synchronize users from multiple LDAP/Active Directories with the miniOrange WordPress LDAP/Active Directory plugin. This powerful feature supports flexible login experiences, allowing users to access your site with credentials from various LDAP servers or domains. Enhance both security and user convenience by centralizing authentication and managing diverse user sources effortlessly.
LDAP/Active Directory Integration for WordPress Multisite Environments
Simplify AD/LDAP login and synchronization across your WordPress multisite environment with the miniOrange LDAP/AD Login for Multisite Plugin. This powerful plugin suite enables centralized LDAP/AD server configuration at the network level, allowing you to manage and deploy LDAP integration for multiple subsites from a single setup. Easily control which subsites have LDAP access, ensuring consistent user authentication and streamlined management throughout your multisite network.
Other Use-Cases we support:-
Integration with Different CMSs
LDAP/Active Directory Integration for ExpressionEngine
LDAP/Active Directory Integration for OpenCart
LDAP/Active Directory Integration for Craft CMS
Need support?
For support or troubleshooting help, please email us at info@xecurify.com or Contact us.
Screenshots
Configure LDAP Server Connection
Configure LDAP User Login Mapping
LDAP Groups to WordPress Users Role Mapping
User Attributes Mapping between LDAP and WP
Sign-In Settings
Configure Multiple Directories
Export/Import LDAP Plugin Configuration
LDAP Authentication Report
LDAP Premium Add-ons
