Skip to content

Version: 1.0.0

Choose a tag to compare

View all tags
@bordoni bordoni released this 27 Apr 00:17
· 126 commits to main since this release
1.0.0
This tag was signed with the committer’s verified signature.
bordoni Gustavo Bordoni
GPG key ID: 1AC8FAFD39CAF33E
Verified
Learn about vigilant mode.
306cdb5
This commit was signed with the committer’s verified signature.
bordoni Gustavo Bordoni
GPG key ID: 1AC8FAFD39CAF33E
Verified
Learn about vigilant mode.

First stable release of Integration with WorkOS — enterprise identity for WordPress, powered by WorkOS.

Highlights

Custom AuthKit — WordPress-hosted login experience

A React login shell mounted inside WordPress. All WorkOS API calls stay server-side; the browser only ever talks to /wp-json/workos/v1/auth/*.

  • Login Profiles — admin-defined presets at WorkOS → Login Profiles (sign-in methods, pinned organization, signup / invitation / password-reset flows, MFA policy, branding, custom URL paths).
  • wp-login.php takeover — action=login renders the React shell; everything else passes through to WordPress defaults.
  • Sign-in methods — email + password, magic code, social OAuth (Google, Microsoft, GitHub, Apple), passkey.
  • MFA — TOTP, SMS, WebAuthn / passkey. In-app enrollment, challenge, and verify. Per-profile mfa.enforce and factor allowlist.
  • Self-serve flows — sign-up with email verification, invitation acceptance, password reset — all in-app.
  • WorkOS Radar integration — browser action token forwarded on every server-side auth call.
  • Profile routing rules — ordered redirect_to glob / referrer_host / user_role matchers pick the right profile per request.
  • SlotFill extensibility — 10 named React slots for third-party plugins to inject UI without forking the shell.

Base platform

  • SSO via WorkOS AuthKit (redirect or headless), Directory Sync (SCIM) with provisioning + deprovisioning, Role Mapping WorkOS → WP, Organization Management with multisite support, Entitlement Gate.
  • Webhook processing — real-time user, organization, and directory events at /wp-json/workos/v1/webhook.
  • REST API authentication — Bearer token auth for headless / decoupled WordPress.
  • Activity & Audit Logging — local table viewer + WorkOS Audit Logs forwarding.
  • Role-based login & logout redirects, password-reset & registration redirects, login bypass via ?fallback=1.
  • Diagnostics page, Onboarding wizard, Admin Bar badge, WP-CLI commands for scripting and bulk operations.

Security & internationalization

  • Webhook signature verification, atomic invitation token consumption, MFA enforcement at challenge time, per-IP and per-email rate limits on every auth mutation, profile-scoped WP nonces.
  • Browser i18n via @wordpress/i18n with full integration-workos text-domain support.

Screenshots

Custom AuthKit login Login Profiles WorkOS settings Role mapping & redirects
Branded Custom AuthKit login Login Profiles list WorkOS settings Role mapping and redirects
Branded login your site visitors see — logo, brand color, and the sign-in methods you enable. Pick sign-in methods, pin an organization, set MFA policy, brand each card without code. Switch Production / Staging, manage API credentials, and pick the login mode. Map WorkOS roles to WP roles and send users to role-specific URLs.

Requirements

Installation

Download the attached .zip, then in WordPress admin go to Plugins → Add New → Upload Plugin. Activate, then visit Settings → WorkOS to add your API credentials. The Onboarding wizard at WorkOS → Onboarding walks through first-time setup.

Links

Assets 3
Loading