You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add plugin row action links (Settings + Sponsor) in includes/Plugin.php and register the filter so the sponsor link appears on the Plugins list. Add multiple README screenshots and a Support/Sponsor section, and include several new screenshot assets under screenshots/. Bump plugin version and WORKOS_WP_VERSION constant to 1.0.0 in workos-for-wordpress.php to mark the release.
Copy file name to clipboardExpand all lines: README.md
+28Lines changed: 28 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,6 +4,8 @@
4
4
5
5
Replace the default WordPress login with WorkOS AuthKit and unlock SSO, SAML, OIDC, social login, MFA, and centralized user management — all without writing a single line of code.
For managed deployments, staging environments, or version-controlled infrastructure, you can define credentials as constants in `wp-config.php` instead of storing them in the database:
@@ -99,6 +105,8 @@ When the plugin is configured, the WordPress login page (`wp-login.php`) automat
99
105
-**Session management** — WorkOS session IDs are tracked so logout properly revokes both the WordPress session and the AuthKit hosted session.
100
106
-**Bypass mode** — Append `?workos_bypass` to `wp-login.php` to access the native WordPress login form (useful for emergency access).
Bind your WordPress site to a WorkOS organization and map WorkOS roles to WordPress roles.
@@ -109,6 +117,8 @@ Bind your WordPress site to a WorkOS organization and map WorkOS roles to WordPr
109
117
110
118
On each login, the plugin fetches the user's organization membership from WorkOS and sets their WordPress role accordingly. Users without a mapped role keep their current role.
111
119
120
+

121
+
112
122
### Organization Entitlement Gate
113
123
114
124
When enabled, the entitlement gate requires users to have an **active membership** in your configured WorkOS organization before they can log in. Users who authenticate successfully via WorkOS but are not organization members are denied access with a clear message.
@@ -141,6 +151,8 @@ The sync runs sequentially with a built-in delay between API calls to respect ra
141
151
-**Enable the Entitlement Gate** after syncing to enforce organization-based access going forward.
142
152
-**Disable Learning Mode** once all users are imported — it is an onboarding tool, not a permanent setting.
The plugin enhances the standard WordPress **Users** table (`wp-admin/users.php`) with:
@@ -155,6 +167,8 @@ The plugin enhances the standard WordPress **Users** table (`wp-admin/users.php`
155
167
-**Learning Mode ON** → "reSync to WorkOS" — Pushes the user's data to WorkOS and ensures organization membership.
156
168
-**Learning Mode OFF** → "reSync from WorkOS" — Verifies the user exists in WorkOS with an active organization membership. If they don't, the user is **suspended** (all WordPress roles are removed, preventing login). Their account and content are preserved.
157
169
170
+

171
+
158
172
### Activity Tracking
159
173
160
174
An optional local audit log that records authentication events. No data is sent externally.
@@ -179,6 +193,8 @@ The **Usage** page displays:
179
193
- A table of the 20 most recent events with user email, IP address, and timestamp
0 commit comments