Active Directory Integration / LDAP Integration

Add Ons Kerberos Single Sign On (SSO) Sync User LDAP Directory Profile Picture Sync for WordPress and BuddyPress Search Staff/Employee from LDAP Active Directory Password Sync with LDAP Server

Minimum Requirements

• Compatible with WordPress version 5.0 or higher
• Compatible with PHP version 5.6.0 or higher
• PHP LDAP extension Enabled

Get a quick overview of our product

Features of the AD Integration/ LDAP Integration Login for Intranet Sites Plugin

The LDAP/Active Directory Login for Intranet sites plugin includes user management features as well, such as adding users from Active Directory or another LDAP Directory who are not registered in WordPress, WordPress role mapping, LDAP/Active Directory to WordPress attribute mapping, and more. We also provide additional add-ons that enhance the functionality of the basic plugin such as enabling Kerberos/NTLM SSO Authentication , importing users from Active Directory/LDAP Server to WordPress, creating users in Active Directory/LDAP server when created/registered in the WordPress site, sync users between the Active Directory/LDAP server and WordPress site, sync LDAP/Active Directory Profile Picture thumbnail attribute to WordPress user profile picture, AD integration with third-party plugins and more.

What is Kerberos/NTLM Single Sign On (SSO)

Effortlessly enable Single Sign-On (SSO) within your Active Directory-secured intranet using Kerberos/NTLM authentication . Enjoy passwordless login for domain-joined machines and enhanced security through restricted external access. With cross-platform compatibility, Kerberos authentication across Windows is also ensured. Kerberos authentication can also be done access Ubuntu, CentOS, and RHEL , protecting against unauthorized access and impersonation threats. You can also configure Kerberos/NTLM SSO with Apache on Windows .

Benefits of Kerberos Authentication Protocol

Secure Authentication : Strong cryptography ensures safe access to systems and resources. Mutual Authentication : Verifies both client and server identities to prevent impersonation. Cross-Platform Compatibility : Supports diverse operating systems and applications for broad SSO adoption.

Free Version Features:-

• LDAP / Active Directory Login: Authenticate users by verifying their LDAP or Active Directory credentials instead of storing separate credentials in WordPress. This gives your intranet a centralized login system.
• LDAP User Auto Creation: When a directory user logs in for the first time, the plugin creates a matching WordPress account automatically. No manual user creation required.
• LDAP Profile Sync: Update a user’s WordPress profile on every login by pulling details such as name, email, and username from your directory server.
• Default Role Mapping: Assign a default WordPress role to all authenticated directory users to maintain consistent permissions across your intranet.
• LDAP Attribute Mapping: Map directory attributes like mail, sAMAccountName, UID, or CN to WordPress user fields. This keeps user information aligned between systems.
• LDAPS Support : Encrypt all authentication traffic between WordPress and your directory server using LDAPS. This protects credentials from being intercepted.
• LDAP Authentication Reports: Record all failed LDAP or Active Directory login attempts. Admins can export these logs to review potential security issues or misconfigurations.
• Add WordPress Users to LDAP: When a new user registers on WordPress, the plugin can automatically create or update the corresponding account in your directory (when supported).
• LDAP OU Fetching: Automatically pull Organization Units (OUs) from your directory to help you set up the correct search base during configuration.
• LDAP Connection Test: Test your directory hostname, port, bind details, and search base before enabling login to ensure everything works as expected.
• Demo LDAP Server: Use the built-in demo directory to try the plugin without connecting your production LDAP or Active Directory environment.
• Hybrid LDAP Support: Support configurations where part of your environment runs on-prem Active Directory and part uses cloud directory services.
• WordPress Compatibility: Fully compatible with the latest WordPress and PHP versions. Includes documentation, setup videos, and easy configuration screens.

You can find out how to configure the (AD Integration) Active Directory Integration / LDAP Integration plugin through the video below

This LDAP/Active Directory Login (AD Login) plugin is free to use under the Expat license. If you wish to use enhanced features, you may purchase our Premium version . We also provide additional add-ons that enhance the functionality of the basic WordPress LDAP/AD Login plugin. This will help support further development of our LDAP plugin, and in turn, serve our customers better.

Premium Version Features

• Our premium plugin includes additional features, as well as the aforementioned free plugin features.
• Login with Any LDAP Attribute: Authenticate users using attributes like sAMAccountName, UPN, mail, UID, or any custom field defined in your directory schema.
• Advanced LDAP / AD Role Mapping: Assign roles dynamically based on a user’s group membership or OU. You can create multiple mapping rules for different user segments.
• LDAP Group Fetching: Automatically fetch directory security groups to simplify role-mapping setup inside WordPress.
• Extended LDAP Attribute Mapping: Map extended directory attributes such as givenName, sn, telephoneNumber, and custom schema fields to WordPress user meta.
• Custom LDAP Attribute Support: Create custom WordPress profile fields and link them to any attribute available in your directory server.
• Custom LDAP / AD Search Filters: Restrict login using rules based on group membership, userAccountControl flags, or any advanced LDAP filter.
• Multiple LDAP Search Bases: Authenticate users across multiple OUs or directory paths without duplicating configuration.
• Multi-Directory Login: Connect WordPress to multiple LDAP or Active Directory domains. The plugin can try each directory in sequence or route users based on domain rules.
• WordPress to Directory Sync: Push WordPress profile updates back to your directory server to maintain consistency in both directions.
• Dual Authentication Mode: Allow both directory users and native WordPress users to log in. Useful for mixed environments or admin-only local access.
• Post Login Redirects: Send users to a custom URL, homepage, or profile page after successful login.
• Detailed LDAP Authentication Logs: Collect detailed logs for each failed authentication attempt, including reason codes, timestamps, and directory responses.
• Import / Export Plugin Configuration: Export your plugin setup from staging and import it into production to avoid repetitive configuration work.
• Multisite LDAP / AD Support : Configure your directory connection at the network level and apply it to selected subsites in a WordPress multisite network.
• Role-Based Login Restrictions: Restrict login based on assigned WordPress roles when running mixed login environments.
• Provides seamless AD integration with third-party plugins such as BuddyBoss, BuddyPress, Ultimate Member, Gravity Forms, Groups, and eMember.

You can find out Active Directory Integration / LDAP Integration Premium Version Features through the video below

Add-ons List

• Active Directory Single Sign-On (SSO) using Kerberos/NTLM : Enable passwordless SSO for domain-joined machines using Kerberos or NTLM. Works with Apache, IIS, Windows with Apache, and GSSAPI-based authentication.
• Sync Users LDAP Directory : Import directory users into WordPress and schedule ongoing synchronizations. Supports bidirectional sync when enabled.
• Sync BuddyPress Extended Profiles : Pull directory attributes into BuddyPress extended profile fields during login.
• Password Sync with Active Directory/LDAP Directory : Sync password changes made in WordPress back to your directory server, keeping creden