Use directory credentials for WordPress login

The LDAP/Active Directory login for Intranet Sites Premium Plugin connects WordPress authentication to an LDAP or Active Directory server. When a user’s credentials match, the add-on signs them in and makes or updates their WordPress account. Directory attributes can be synchronized to the profile on each login.

Map directory customers and access

Administrators can configure how directory identities and access rules carry over to WordPress.

• Allow login with an LDAP attribute such as sAMAccountName, UPN, mail, UID, or a custom directory attribute.
• Map standard, extended, and custom directory attributes to WordPress profile fields.
• Assign WordPress roles using directory groups or organizational units (OUs), with multiple mapping rules where needed.
• Fetch directory groups and OUs to help configure mappings.
• Use custom LDAP filters and multiple search bases to locate or limit eligible visitors.
• Connect multiple LDAP or Active Directory domains, trying servers in sequence or routing users by domain.

Directory and connection settings

Supported environments include Microsoft Active Directory, Azure Active Directory, Sun Active Directory, OpenLDAP, JumpCloud, FreeIPA, Synology, OpenDS, and other LDAP directories. LDAPS can encrypt traffic between WordPress and the directory, and backup LDAP servers can be configured. Administrators can test authentication settings before enabling login.

Kerberos or NTLM single sign-on for passwordless Active Directory login on domain-joined machines is available through a separate add-on.

Deployment and login oversight

In mixed login environments, directory users and native WordPress users can both be allowed to sign in, with role-based login restrictions available. For multisite, administrators can configure the directory connection at the network level and apply it to selected subsites. WordPress-to-directory synchronization and post-login redirects are also supported.

Failed LDAP and Active Directory authentication attempts are logged for review and troubleshooting. Detailed logs can include reason codes, timestamps, and directory responses.

Separate add-ons

Additional listed add-ons include directory profile-picture synchronization for WordPress and BuddyPress, staff or employee search from LDAP, and Active Directory password synchronization with an LDAP server. A separate directory-sync add-on can import users and schedule ongoing synchronization.

Setup and requirements

1. Install and activate the Premium Plugin in WordPress.
2. Enter the LDAP or Active Directory server connection details.
3. Configure search bases, filters, attributes, and group or OU role mappings.
4. Choose connection and authentication settings, such as LDAPS or Kerberos/NTLM when using the SSO add-on.
5. Test authentication and review the result before inviting users to sign in.

The stated minimum versions are WordPress 5.0 and PHP 5.6.0. The server also needs the PHP LDAP and OpenSSL modules enabled.