Integration with WorkOS — WordPress Authentication Plugin

Integration with WorkOS at a glance

Is Integration with WorkOS well maintained?

• WordPress-hosted React login — no redirect to WorkOS for password, magic code, signup, invitation, or MFA. Mounts on wp-login.php, a shortcode…
• Login Profiles — admin-defined presets (enabled sign-in methods, pinned organization, signup/invite toggles, MFA policy, branding) edited from WorkOS → Login…
• Per-profile custom URL paths — assign any profile its own URL (e.g. /members, /team/login) on top of the canonical /workos/login/{profile} rewrite. When the…
• Already-signed-in handling — visitors who hit any AuthKit surface while logged in are 302’d to their post-login destination (or, in the shortcode, see an…
• forward_query_args per-profile toggle — opt-in passing of marketing/analytics query args (utm_*, ref, etc.) onto the post-login destination. WP and plugin…
• Sign-in methods — email + password, magic code, social OAuth (Google, Microsoft, GitHub, Apple), and passkey. Each profile chooses its own subset
• MFA — TOTP, SMS, and WebAuthn/passkey with in-app enrollment + challenge. Profile-level mfa.enforce (never/if_required/always) and factor allowlist are applied…
• Self-serve sign-up + invitation acceptance + in-app password reset — all handled by the React shell; no third-party pages
• Branding controls — per-profile heading, subheading, primary color (with WordPress admin-color presets), and logo with a three-mode toggle (default falls back…
• Embed & URLs in the editor — every Login Profile shows copyable input fields for its canonical URL, optional custom-path URL, and shortcode so admins can paste…
• WorkOS Radar anti-fraud integration optional via WORKOS_RADAR_SITE_KEY
• Profile routing rules — send incoming logins to a specific profile based on redirect_to, referrer host, or user role