If you’re happy with this plugin : As a reward for my efforts, I would like to receive T-shirts (or other goodies) as gifts from the universities or companies that use it. My size is L. Best regards. This Apereo CAS authentication plugin has no phpCas library dependency. This is not only an authenti
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 4.4 and PHP 7.0.
SourceWordPress plugins · Oct 17, 2026
01 / Source details
About this tool.
If you’re happy with this plugin : As a reward for my efforts, I would like to receive T-shirts (or other goodies) as gifts from the universities or companies that use it. My size is L. Best regards.
This Apereo CAS authentication plugin has no phpCas library dependency. This is not only an authentication plugin. You can build custom authorization rules according to cas user attributes populated. If user don’t exist in WordPress database, it can be created automatically. There are many features. You can customize everything.
Website
https://wpcassify.wordpress.com/
Development and release environment
This plugin is now developed and tested from a github repository. You can find it here : https://github.com/WP-Cassify/wp-cassify-develop
Don’t hesitate to contribute to this project. You can fork it and make pull requests !
Requirements
Require at least PHP version 7.0
Require at least PHP CURL package
Features included
SLO (Single Log Out) support (thanks to dedotombo and me)
Adding NCONTAINS operator (thanks to blandman)
Fix bug on Gateway mode (autologin) (thanks to dedotombo again). Now it’s now necessary to hack theme files to fire it.
Adding option logout on authentication failure to not disturb users
Initialize PHP session at a later stage (on wp_loaded not on init)
Adding some customs hooks and filters.
Tested with Apereo CAS Server version 7.3.5
Compatible with CAS Protocol version 2 and 3
Automatic user creation if not exist in WordPress database.
Synchronize WordPress User metas with CAS User attributes.
Add support for multivaluate cas user fields. Now multivaluate fields can be serialized to be stored in custom WP User meta.
Be careful, to access to CAS User Attributes from your theme file (from 1.8.4), use code below : <?php if ( isset($GLOBALS['wp-cassify']) ) { print_r( $GLOBALS['wp-cassify']->wp_cassify_get_cas_user_datas() ); } ?>
Set up WordPress Roles to User according to CAS User attributes.
If plugin is network activated, you can define User Role Rule scope by blog id.
Authorization rule editor.
Compatible with WordPress Access Control Plugin.
Manage URL White List to bypass CAS Authentication on certain pages.
Much simpler bypass authentication with post method provided by Susan Boland (See online documentation). Create wordpress authentication form with redirect attribute like this (works only if URL bypass is enabled in settings) : <?php $args = array( 'echo' => true, 'remember' => true, 'redirect' => site_url( '/?wp_cassify_bypass=bypass' ), 'form_id' => 'loginform', 'id_username' => 'user_login', 'id_password' => 'user_pass', 'id_remember' => 'rememberme', 'id_submit' => 'wp-submit', 'label_username' => __( 'Username' ), 'label_password' => __( 'Password' ), 'label_remember' => __( 'Remember Me' ), 'label_log_in' => __( 'Log In' ), 'value_username' => '', 'value_remember' => false ); wp_login_form( $args ); ?>
Receive email notifications when trigger is fired (after user account creation, after user login/logout).
Define notifications rules based on user attributes values.
Purge user roles before applying user role rules.
Define user account expiration rules bases on CAS User attributes.
Network activation allowed
You can set Service Logout URL (Needs to have CAS Server with followServiceRedirects option configured).
Add support for web application hosted behind a reverse proxy. (Thanks to franck86)
Custom filter to perform custom cas server response parsing. Hook name : wp_cassify_custom_parsing_cas_xml_response (See online documentation)
Custom shortcode to generate CAS login/logout link into your blog. (See online documentation)
Debug settings, dump last xml cas server response.
Detect if user has already authenticated by CAS from your public pages and perform auto-login with gateway mode
Add ‘-IN’ and ‘-NOTIN’ operators to process array attributes values returned from CAS. When you have : $cas_user_datas['title'] = array( 'Student', 'Professor' );
Then you can use :
(CAS{title} -IN "professor")
02 / Source details
Getting started.
This section describes how to install the plugin and get it working.
e.g.
01Upload the plugin files to the /wp-content/plugins/wp-cassify directory, or install the plugin through the WordPress plugins screen directly.
02Activate the plugin through the ‘Plugins’ screen in WordPress
03Use the Settings->WP Cassify screen to configure the plugin
03 / Source details
Frequently asked questions.
Where can i find plugin documentation ? You can find documentation here (See Plugin options and Screencasts) : https://wpcassify.wordpress.com/
How to perform CAS Authentication on a front Office page ? Install WordPress Access Control Plugin. And mark page as “Only accessible by members”. You can use anoter ACL plugin. If page require an authentication, CAS Authentication is fired.
How to protect all website ? Install WordPress Access Control Plugin. In Settings >> Members Only, Check “Make Blog Members Only” option.