WP Multisite Internal SSO v1.0.0

First public release of WP Multisite Internal SSO.

Highlights

• Network-admin settings: primary-site picker + per-site secondary toggles (network options), replacing hardcoded config.
• HMAC-SHA256 single-use, replay-protected SSO tokens; configurable expiry; constant-time verification; never logged.
• Any number of secondary sites.
• Front-end status output gated behind a WP_DEBUG-only opt-in.
• Security pass: input sanitization, output escaping, wp_safe_redirect + open-redirect validation, nonce/capability checks, get_sites() over raw SQL.
• Translation-ready (.pot included).

Quality gates: PHPCS/WPCS 0 errors · PHPUnit 29/29 · Cypress e2e 7/7 (2-site multisite) · WP Plugin Check 0 errors.

Note: wordpress.org submission requires renaming the plugin/slug to drop the reserved term "wp" (Plugin Check trademarked_term).