The LDAP/Active Directory login for Intranet Sites Premium Plugin checks WordPress login credentials against an LDAP or Active Directory server. When the credentials match, the user can sign in and the add-on can create or update their WordPress account. Mapped directory details can also sync to the user profile on each login.

Directory data and WordPress access

Use directory attributes to populate WordPress profile fields, and assign roles based on directory groups or organizational units (OUs). Administrators can fetch groups and OUs to help configure these mappings. The plugin also supports custom attributes, LDAP filters, and multiple search bases.

• Authenticate with LDAP or Active Directory credentials.
• Sync directory user data to WordPress profiles at login.
• Map directory attributes to WordPress fields, including custom fields.
• Assign WordPress roles from directory groups or OUs using mapping rules.
• Configure multiple LDAP or Active Directory servers, with sequential attempts or domain-based routing.
• Allow directory accounts and native WordPress accounts to sign in together.

Supported directories and connection options

Supported directory environments include Microsoft Active Directory, Azure Active Directory, Sun Active Directory, OpenLDAP, JumpCloud, FreeIPA, Synology, OpenDS, and other LDAP directories. Use LDAPS to encrypt traffic between WordPress and the directory server. For passwordless Active Directory sign-in on domain-joined machines, Kerberos or NTLM is available through a separate SSO add-on. Backup LDAP servers can be configured as alternate endpoints.

Test and review authentication

Test the directory connection and authentication options before customers sign in. When LDAP authentication fails, the plugin entries the attempt for troubleshooting and security review. Detailed logs can include reason codes, timestamps, and directory responses.

Setup and requirements

1. Install and activate the Premium Plugin in WordPress.
2. Enter the LDAP or Active Directory server connection details.
3. Configure search bases, filters, attribute mappings, and group or OU role rules.
4. Select connection and authentication options, such as LDAPS or Kerberos/NTLM where applicable.
5. Test authentication and review the result before inviting users to sign in.

The stated minimum requirements are WordPress 5.0 or later, PHP 5.6.0 or later, and the PHP LDAP extension enabled.

Related add-ons

Separate add-ons are available for Kerberos Single Sign On, directory user synchronization, profile picture synchronization for WordPress and BuddyPress, staff search from LDAP, and password synchronization with an LDAP server.