# Login by Auth0 (Wordpress) Passwordless OTP and Embed

**URL:** <https://community.auth0.com/t/login-by-auth0-wordpress-passwordless-otp-and-embed/117314>\
**Category:** Get Help\
**Tags:** login-prompt-new-experience, login-experience\
**Created:** [September 27, 2023, 11:33pm UTC](https://community.auth0.com/t/login-by-auth0-wordpress-passwordless-otp-and-embed/117314 "2023-09-27T23:33:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![idp\_of\_ngf](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@idp\_of\_ngf](https://community.auth0.com/u/idp_of_ngf)\
**Post date:** [September 27, 2023, 11:33pm UTC](https://community.auth0.com/t/login-by-auth0-wordpress-passwordless-otp-and-embed/117314/1 "2023-09-27T23:33:26Z")

</div>

I have the wordpress plugin working on my site, EXCEPT the embed (Lock) for Passwordless Email OTP.

I am getting this in the browser:

 ![image](https://global.discourse-cdn.com/auth0/original/3X/5/f/5f99b46e4cd01213a235393249f04ce2b552dc97.png)

In my logs I am getting:

 ![image](https://global.discourse-cdn.com/auth0/original/3X/0/5/057200dbdf1cf629c1858e1f13c9ac57af12836d.png)  
I am have the Passwordless OTP grant type turned on. I have the client ID and secret configured.

I just don’t see anywhere else in the plugin I can tweak OAuth client settings.

Has anyone else struggled with this?

Everything on my end is at the latest version

---

<div class="post-metadata">

**Author:** ![idp\_of\_ngf](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@idp\_of\_ngf](https://community.auth0.com/u/idp_of_ngf)\
**Post date:** [October 2, 2023, 12:52am UTC](https://community.auth0.com/t/login-by-auth0-wordpress-passwordless-otp-and-embed/117314/2 "2023-10-02T00:52:27Z")

</div>

An FYI for everyone. The Wordpress plugin was not expected to be used for Universal Login and Embedded (Lock). When using embed the token authorization authentication needs to be set to none, which is not secure OAuth. Auth0 support had a great dialog with me about this, and I have decided to redo all my login needs to use Universal Login.

Nothing is broke here…the documentation around the plugin needs some clarifications.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 16, 2023, 12:52am UTC](https://community.auth0.com/t/login-by-auth0-wordpress-passwordless-otp-and-embed/117314/3 "2023-10-16T00:52:56Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.