Google sign-in for WordPress

Login for Google Apps authenticates existing WordPress accounts through Google using OAuth2. Users already signed in to Google can continue from the WordPress login screen without entering a separate WordPress password. If two-factor authentication is enabled for their Google account, it can be used during sign-in.

The base login flow connects existing WordPress users whose email addresses match a Google account. The add-on works on single-site and multisite WordPress installations and private intranets. Premium and Enterprise add account management for a Google Workspace domain.

Premium account creation

Login for Google Apps Premium enables users in a Google Workspace domain to sign in. If an eligible user does not have a WordPress account, the plugin can make one automatically, reducing the need to create accounts manually before login.

Enterprise access and role controls

Enterprise includes the Premium login and account-creation workflow. Administrators can set access and WordPress role controls based on Google Group or Organizational Unit membership. Enterprise also logs accounts created and roles changed by the plugin, so administrators can review those changes.

Extensions using shared Google access

Login for Google Apps includes a shared authentication platform for Google functionality on a WordPress website. Extensions can use the authentication and permissions granted through the plugin instead of configuring authentication independently.

• Google Drive Embedder: lets users view for Google Drive documents and embed them in posts or pages.
• Google Apps Directory: lets logged-in users search an employee directory from a widget on an intranet or client site.
• Google Profile Avatars: shows users' Google profile photos in place of their avatars throughout the site.

Configuration

Setup requires administrator access to a Google Workspace domain or a regular Gmail account. Register with Google, obtain two codes, and enter them in the plugin configuration. The setup uses OAuth2 rather than the older SAML protocol.