# WordPress Single Sign-On (SSO) with Auth0

**URL:** <https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739>\
**Category:** Blog Discussions\
**Tags:** plugin, wordpress-login, single-sign-on, sso, wordpress\
**Created:** [July 10, 2019, 1:58pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739 "2019-07-10T13:58:17Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![ramiro](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ramiro/32/8077_2.png) [@ramiro](https://community.auth0.com/u/ramiro)\
**Post date:** [July 10, 2019, 1:58pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/1 "2019-07-10T13:58:18Z")

</div>

See how to manage WordPress Single Sign-On (SSO) with Auth0’s identity and access management platform.

[Read on 🔐](https://auth0.com/blog/wordpress-sso-with-auth0)

Blog post brought to you by @josh.cunningham👨🏻‍💻

 ![](https://global.discourse-cdn.com/auth0/original/2X/b/b3ad5901127d0c15d596d7cb5246f9c6da7518dc.jpeg)

---

<div class="post-metadata">

**Author:** ![josh.cunningham](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josh.cunningham/32/16289_2.png) [@josh.cunningham](https://community.auth0.com/u/josh.cunningham)\
**Post date:** [July 10, 2019, 5:37pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/2 "2019-07-10T17:37:48Z")

</div>

Happy to answer any questions you have about how this works, how to set everything up, or anything else WordPress/auth related! Feedback on the plugin is welcome as well 🙇‍♂️

---

<div class="post-metadata">

**Author:** ![bell621iran](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/bell621iran/32/14649_2.png) [@bell621iran](https://community.auth0.com/u/bell621iran)\
**Post date:** [July 15, 2019, 6:11am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/3 "2019-07-15T06:11:21Z")

</div>

Thank you very much for sharing this very useful information.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [July 15, 2019, 6:35am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/4 "2019-07-15T06:35:55Z")

</div>

We’re here for you @bell621iran! Leet us know if you have any other questions!

---

<div class="post-metadata">

**Author:** ![khacxuyenit](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/khacxuyenit/32/17017_2.png) [@khacxuyenit](https://community.auth0.com/u/khacxuyenit)\
**Post date:** [October 29, 2019, 4:11am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/5 "2019-10-29T04:11:08Z")

</div>

Hi Josh.cunningham,

I am working to get the token with Auth0 by suing postman. I spent more time with many ways but it still does not work so far.

High appreciate if you have any advice/ideas.

Thanks,  
Xuyen Tran

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [October 29, 2019, 7:28am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/6 "2019-10-29T07:28:59Z")

</div>

Hey there!

Have you already tried this of our docs on working with Auth0 APIs using Postman?

> **[Auth0 APIs](https://auth0.com/docs/api)**
>
> Learn about Auth0's Management and Authentication APIs.

---

<div class="post-metadata">

**Author:** ![dakotaspotlight](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dakotaspotlight/32/12778_2.png) [@dakotaspotlight](https://community.auth0.com/u/dakotaspotlight)\
**Post date:** [October 2, 2020, 7:02pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/7 "2020-10-02T19:02:11Z")

</div>

Josh, in your paper you say:

The plugin can be configured to allow new accounts to be created from Auth0 users even if site registration is turned off. This allows new sites to be added without requiring known users to register!

Can you explain how to do this?

---

<div class="post-metadata">

**Author:** ![josh.cunningham](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josh.cunningham/32/16289_2.png) [@josh.cunningham](https://community.auth0.com/u/josh.cunningham)\
**Post date:** [October 7, 2020, 12:21am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/8 "2020-10-07T00:21:21Z")

</div>

@dakotaspotlight - Absolutely! If you turn site registration off in WordPress general settings and “Auto provisioning” on in the Auth0 plugin settings \> Advanced tab, you’ll be able to add users in Auth0 that will create users in WordPress when logging in.

---

<div class="post-metadata">

**Author:** ![flintz](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/flintz/32/13741_2.png) [@flintz](https://community.auth0.com/u/flintz)\
**Post date:** [October 21, 2020, 2:29pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/9 "2020-10-21T14:29:09Z")

</div>

Hi there! Ive recently been tasked with setting up Auth0 across a couple different sites. I have a VUE site set up with Auth0, and Ive got the Wordpress site with the Auth0 plugin installed as well. Everything is working great, and the plugin is super simple to install/setup.

In the VUE site, I can use router middleware to check auth0.isauthenticated before any route, and conditionally ‘login’ the user, and I was wondering if I could somehow do the same for Wordpress?

Im new to Wordpress. So what Id like to do, is when any Wordpress page is loaded, I check if auth0 has an authenticated user (maybe the user had already logged in to my VUE app), and then automatically log them into Wordpress.

If I manually visit wp-login.php route, with a user that had already logged in, it logs the user in without going to the universal loginform (which is great), but id like it login the user without visiting that URL.

I hope that makes sense… ANy help/suggestions would be appreciated.

---

<div class="post-metadata">

**Author:** ![josh.cunningham](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josh.cunningham/32/16289_2.png) [@josh.cunningham](https://community.auth0.com/u/josh.cunningham)\
**Post date:** [October 26, 2020, 1:23pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/10 "2020-10-26T13:23:06Z")

</div>

Hi @flintz! While it’s possible to check the Auth0 session on every page load, we would not recommend it as you might hit your rate limit quickly if you’re doing it on all pages for all unauthenticated users. Because of that, the WordPress plugin does not include that functionality. If you wanted to add it to your site, you would need to include one of our browser-based libraries and redirect through `wp-login.php` if a session was found. The Vue library can use what it gets back for the session to be set but the WordPress session cookie needs to be set with WordPress.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [December 10, 2021, 9:23am UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/11 "2021-12-10T09:23:03Z")

</div>



---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [March 7, 2022, 2:07pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/12 "2022-03-07T14:07:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![chemaly](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chemaly/32/44209_2.png) [@chemaly](https://community.auth0.com/u/chemaly)\
**Post date:** [February 16, 2023, 5:58pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/14 "2023-02-16T17:58:59Z")

</div>

Does anyone have the updated link to that post?  
I am trying to implement auth0 on a wordpress site to let my users sign up and access content.

Thanks!

---

<div class="post-metadata">

**Author:** ![dan-auth0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@dan-auth0](https://community.auth0.com/u/dan-auth0)\
**Post date:** [February 16, 2023, 6:24pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/15 "2023-02-16T18:24:03Z")

</div>

Hello, Christian! Welcome to the Auth0 Community. Are you referring to an updated blog post to this one: [WordPress Single Sign-On (SSO) with Auth0](https://auth0.com/blog/wordpress-sso-with-auth0/) ?

---

<div class="post-metadata">

**Author:** ![chemaly](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chemaly/32/44209_2.png) [@chemaly](https://community.auth0.com/u/chemaly)\
**Post date:** [February 16, 2023, 6:28pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/16 "2023-02-16T18:28:06Z")

</div>

Hey Dan - Thanks for the warm welcome.  
Yes - unless there is a different version to that blog that is specific to implementing auth0 on wordpress (honestly I am looking to use passwordless OTP and using auth0 for regular users, not admins)

---

<div class="post-metadata">

**Author:** ![dan-auth0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@dan-auth0](https://community.auth0.com/u/dan-auth0)\
**Post date:** [February 16, 2023, 6:31pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/17 "2023-02-16T18:31:57Z")

</div>

Gotcha! This is the latest blog post that we have on Wordpress. 🤔

The other resources we have is the following: [Integrate with WordPress](https://auth0.com/docs/customize/integrations/cms/wordpress-plugin/integrate-with-wordpress)

Let me ask if we support the features that you’d like to use. Is this a correct recap?

- Does Auth0 support passwordless OTP access for end-users to Wordpress applications?

---

<div class="post-metadata">

**Author:** ![chemaly](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chemaly/32/44209_2.png) [@chemaly](https://community.auth0.com/u/chemaly)\
**Post date:** [February 16, 2023, 7:18pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/18 "2023-02-16T19:18:01Z")

</div>

That is absolutely correct, and more specifically via email (not SMS OTP), and for both account creation and account sign in.  
Thanks Dan - I feel like I am abusing this threat (I usually try to keep an issue per threat 🙂

---

<div class="post-metadata">

**Author:** ![malanciault](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/malanciault/32/51306_2.png) [@malanciault](https://community.auth0.com/u/malanciault)\
**Post date:** [September 26, 2024, 1:02pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/19 "2024-09-26T13:02:36Z")

</div>

Hi Josh, and community 🙂

We are encountering a problem trying to implement SSO between a PHP app and a WordPress site, with Auth0 has Identity Provider.

Some info:

- The PHP app is integrated with Auth0
- Everything works perfectly
- We have a WordPress site where we installed Login by Auth0 plugin
- When a user tries to login on WordPress, he is redirected to the Universal Login Page, authenticates and is then logged in on the WordPress site

Here is where we are stuck:

- User wants to log to a PHP app integrated with Auth0
- User is redirected to the Universal Login Page
- User is properly authenticated by Auth0
- User is redirected to the PHP app, logged in with a user account
- User navigate to the WordPress site and tries to access a page only available to user
- User is redirected again to the Universal Login Page

Since the user already have an Auth0 session, shouldn’t he already be logged in on the WordPress site ?

Reverse process also ends with the same problem.

What are we missing ? Thanks for any help !

---

<div class="post-metadata">

**Author:** ![malanciault](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/malanciault/32/51306_2.png) [@malanciault](https://community.auth0.com/u/malanciault)\
**Post date:** [September 26, 2024, 1:24pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/20 "2024-09-26T13:24:23Z")

</div>

And found the problem 🙂

We are using a custom domain in our Auth0 application. And the custom domain was not set in the Auth0 WordPress plugin, here:

 ![image](https://global.discourse-cdn.com/auth0/original/3X/5/f/5fec77cd7bd3f5ffe567e7f2c8b01b31dcd5cf43.png)

Once we put the custom domain, everything worked perfectly !

---

<div class="post-metadata">

**Author:** ![itsupport1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/itsupport1/32/75395_2.png) [@itsupport1](https://community.auth0.com/u/itsupport1)\
**Post date:** [June 24, 2025, 5:40pm UTC](https://community.auth0.com/t/wordpress-single-sign-on-sso-with-auth0/27739/21 "2025-06-24T17:40:02Z")

</div>

Hi, I am new to this Auth0 Community.

I discovered this topic while searching to get help on using the Auth0 WordPress Plugin. I installed the plugin but am not seeing the Start Up Wizard in WordPress and an unable to get the Plugin auto configured. I even tried deactivating all other plugins and I still do not see the Start Up Wizard. Can someone help me?

Thanks,  
Shinshuri
