Authorizer
Authorizer restricts access to a WordPress site to specific users, typically students enrolled in a university course. It maintains a list of approved users that you can edit to determine who has access. It also replaces the default WordPress login/authorization system with one relying on an externa
About this tool.
Authorizer restricts access to a WordPress site to specific users, typically students enrolled in a university course. It maintains a list of approved users that you can edit to determine who has access. It also replaces the default WordPress login/authorization system with one relying on an external server, such as Google, CAS, LDAP, or an OAuth2 provider. Finally, Authorizer lets you limit invalid login attempts to prevent bots from compromising your users’ accounts.
View or contribute to the plugin source on GitHub: https://github.com/uhm-coe/authorizer
Authorizer requires the following:
- CAS server (2.x, 3.x, 4.x, 5.x, 6.x, or 7.x) or LDAP server (plugin needs the URL)
- PHP extensions: php-ldap, php-curl, php-dom
Authorizer provides the following options:
- Authentication : WordPress accounts; Google accounts; CAS accounts; LDAP accounts; OAuth2 accounts
- Login Access : All authenticated users (all local and all external can log in); Only specific users (all local and approved external users can log in)
- View Access : Everyone (open access); Only logged in users
- Limit Login Attempts : Progressively increase the amount of time required between invalid login attempts.
- Shortcode : Use the [authorizer_login_form] shortcode to embed a wp_login_form() outside of wp-login.php.
Getting started.
- 01Upload the authorizer directory to the /wp-content/plugins/ directory
- 02Activate the plugin through the ‘Plugins’ menu in WordPress
- 03Specify your server details in the ‘Settings’ menu in WordPress
Frequently asked questions.
Help! I’ve disabled WordPress logins, my external logins (Google/CAS/LDAP/OAuth2) aren’t working, and now I can’t get back in!
If you add external=wordpress to the wp-login.php URL querystring, you can always get the WordPress login form to reappear. For example, if your site is at https://www.example.com , then the URL would be: https://www.example.com/wp-login.php?external=wordpress