Title: Login by Auth0
Author: Auth0
Published: <strong>13. Juni 2014</strong>
Last modified: 12. Juli 2024

---

Search plugins

![](https://ps.w.org/auth0/assets/banner-772x250.png?rev=3351758)

This plugin **hasn’t been tested with the latest 3 major releases of WordPress**.
It may no longer be maintained or supported and may have compatibility issues when
used with more recent versions of WordPress.

![](https://ps.w.org/auth0/assets/icon-256x256.png?rev=3351758)

# Login by Auth0

 By [Auth0](https://profiles.wordpress.org/auth0/)

[Download](https://downloads.wordpress.org/plugin/auth0.4.6.2.zip)

 * [Details](https://de-ch.wordpress.org/plugins/auth0/#description)
 * [Reviews](https://de-ch.wordpress.org/plugins/auth0/#reviews)
 *  [Installation](https://de-ch.wordpress.org/plugins/auth0/#installation)
 * [Development](https://de-ch.wordpress.org/plugins/auth0/#developers)

 [Support](https://wordpress.org/support/plugin/auth0/)

## Description

This plugin replaces standard WordPress login forms with one powered by [Auth0](https://auth0.com)
that enables:

 * **Universal authentication**
    - Over 30 social login providers
    - Enterprise connections (ADFS, Active Directory / LDAP, SAML, Office 365, Google
      Apps and more)
    - Connect your own database
    - Passwordless connections (using email or SMS)
 * **Ultra secure**
    - Multifactor authentication
    - Password policies
    - Email validation
    - Mitigate brute force attacks

### Technical Notes

**IMPORTANT**: By using this plugin you are delegating the site authentication and
profile handling to Auth0. That means that you won’t be using the WordPress database
to authenticate users and the default WordPress login forms will be replaced.

Please see our [How It Works page](https://auth0.com/docs/cms/wordpress/how-does-it-work)
for more information on how Auth0 authenticates and manages your users.

#### Migrating Existing Users

Auth0 allows multiple authentication providers. You can have social providers like
Facebook, Twitter, Google+, and more, a database of users and passwords (just like
WordPress but hosted in Auth0), or you can use an Enterprise directory like Active
Directory, LDAP, Office365, Google Apps, or SAML. All those authentication providers
might give you an email and a flag indicating whether the email was verified or 
not. We use that email (only if it is verified) to associate a previous **existing**
user with the one coming from Auth0.

If the email was not verified and there is an account with that email in WordPress,
the user will be presented with a page saying that the email was not verified and
a link to «Re-send the verification email.» For either scenario, you can choose 
whether it is mandatory that the user has a verified email or not in the plugin 
settings.

**Please note:** In order for a user to log in using Auth0, they will need to sign
up via the Auth0 login form (or have an account created for them in Auth0). Once
signup is complete, their Auth0 user will be automatically associated with their
WordPress user.

#### Widget

You can enable Auth0 as a WordPress widget in order to show it in a sidebar. The
widget inherits the main plugin settings but can be overridden with its own settings
in the widget form. Note: this form will not display for logged-in users.

#### Shortcode

Also, you can use the Auth0 widget as a shortcode in your editor. Just add the following
to use the global settings:

    ```
    [auth0]
    ```

Like widgets, shortcode login forms will use the settings of the plugin. It can 
be customized by adding the following attributes:

 * `icon_url` – A direct URL to an image used at the top of the login form
 * `form_title` – Text to appear at the top of the login form
 * `gravatar` – Display the user’s Gravatar; set to `1` for yes
 * `redirect_to` – A direct URL to use after successful login
 * `dict` – Valid JSON to override form text ([see options here](https://github.com/auth0/lock/blob/master/src/i18n/en.js))
 * `extra_conf` – Valid JSON to override Lock configuration ([see options here](https://auth0.com/docs/libraries/lock/v11/configuration))
 * `show_as_modal` – Display a button that triggers the login form in a modal; set
   to `1` for yes
 * `modal_trigger_name` – Button text to display when using a modal

Beispiel:

    ```
    [auth0 show_as_modal="1" modal_trigger_name="Login button: This text is configurable!"]
    ```

Note: this form will not display for logged-in users.

## Installation

This plugin requires a [free or paid](https://auth0.com/pricing) Auth0 account.

 1. [Sign up here](https://auth0.com/signup).
 2. Follow the [installation instructions here](https://auth0.com/docs/cms/wordpress/installation).

## FAQ

### Can I customize the Auth0 login form?

The Auth0 login form is called Lock and it’s [open source on GitHub](https://github.com/auth0/lock).
You can style the form like any of your site components by enqueuing a stylesheet
in your theme. Use the [`login_enqueue_scripts`](https://developer.wordpress.org/reference/hooks/login_enqueue_scripts/)
hook to style the form on wp-login.php, [`wp_enqueue_scripts`](https://developer.wordpress.org/reference/hooks/wp_enqueue_scripts/)
to style widgets and shortcodes, or both to affect the form in all locations.

### Can I access the user profile information?

The Auth0 plugin transparently handles login information for your WordPress site
and the plugins you use, so that it looks like any other login. User profile data
changes in WordPress **are not** currently sent to Auth0 but changes to the Auth0
user account **are** stored in WordPress user meta (under the key `auth0_obj` prefixed
with `$wpdb->prefix`).

### When I install this plugin, will existing users still be able to log in?

Yes, either by allowing the WordPress login form to be displayed or through migrating
existing users. See the **Technical Notes** section above.

### What authentication providers do you support?

Please see our [complete list of supported social and enterprise authentication providers](https://auth0.com/docs/identityproviders).

### How can I use Lock configuration options that are not provided on the settings page?

Use the «Extra Settings» field on the plugin settings‘ **Advanced** tab to add a
JSON object with all additional configurations. For more information on what else
can be configured, see the [documentation](https://auth0.com/docs/libraries/lock/v11/configuration).

### Is this plugin compatible with WooCommerce?

Yes, this plugin will override the default WooCommerce login forms with the Auth0
login form.

### My question is not covered here … what do I do?

All is not lost!

 * If you’re setting up the plugin for the first time or having issues with users
   logging in, please review our [troubleshooting](https://auth0.com/docs/cms/wordpress/troubleshoot)
   and [configuration](https://auth0.com/docs/cms/wordpress/configuration) documentation.
 * If you found a bug in the plugin code, please [submit an issue](https://github.com/auth0/wp-auth0/issues)
   or [create a pull request](https://github.com/auth0/wp-auth0/pulls) on GitHub.
 * If you have questions about how to use Auth0 or the plugin, please [post on our community site](https://community.auth0.com/)
   or create a [support forum request here](https://wordpress.org/support/plugin/auth0).
 * You can see additional documentation and answers on our [support site](https://support.auth0.com/).
   Customers on a paid Auth0 plan can [submit a trouble ticket](https://support.auth0.com/tickets)
   for a fast response.

## Reviews

![](https://secure.gravatar.com/avatar/4b698e630447fad0f6e3135c32836e7ffcb30c011317bbe06d5c0f7673d2a626?
s=60&d=retro&r=g)

### 󠀁[Avoid «Login by Auth0» – A Broken, Abandoned Mess! 🚨](https://wordpress.org/support/topic/avoid-login-by-auth0-a-broken-abandoned-mess-%f0%9f%9a%a8/)󠁿

 [arbbi](https://profiles.wordpress.org/arbbi/) 7. Februar 2025 1 reply

If you’re considering using the «Login by Auth0» plugin for WordPress authentication,
DON’T. This plugin is an outdated, poorly maintained disaster that can break your
site entirely. ❌ Fatal Errors & Crashes Installing and activating this plugin caused
a fatal error on my WordPress site, making the entire login process unusable. It
hasn’t been properly tested with the latest WordPress versions, and there’s no sign
of maintenance or bug fixes. ❌ No Support, No Updates The plugin is practically
abandoned – the last update was ages ago, and support requests are ignored or unanswered.
If you run into issues, you’re on your own. For a security-focused plugin, this 
is completely unacceptable. ❌ Security Risks An authentication plugin that isn’t
actively maintained is a massive security liability. If a vulnerability is found(
which is likely, given the outdated codebase), you won’t get a fix anytime soon.
❌ Terrible User Experience Even if the plugin doesn’t crash your site (which it
likely will), the configuration is a nightmare. The setup process is clunky, error-
prone, and riddled with outdated documentation. Expect a frustrating experience 
from start to finish. 💀 Final Verdict: DO NOT USE. Auth0 is a great identity provider,
but this WordPress plugin is a complete embarrassment. If you value site stability,
security, and actual support, avoid this plugin at all costs. 🔹 Uninstall immediately.
🔹 Look for a better alternative.🔹 Hope Auth0 either fixes or completely deprecates
this mess. 🚨 DO NOT TRUST YOUR SITE’S LOGIN SECURITY TO THIS BROKEN PLUGIN. 🚨

![](https://secure.gravatar.com/avatar/767d327e543c0f10887bc355c030714dd8cb4d6cc3a9ef4cf77d8b634301036c?
s=60&d=retro&r=g)

### 󠀁[Broken wizard, poor documentation, and poor support](https://wordpress.org/support/topic/broken-wizard-poor-documentation-and-poor-support/)󠁿

 [philbahz](https://profiles.wordpress.org/philbahz/) 18. August 2024

The title says it all. I spent the better part of 3 days trying to get this to work
with no luck. I even paid for a plan to get support. They were little to no help.
I use miniorange for my SSO needs. It works decently and has good support.

![](https://secure.gravatar.com/avatar/7073b3ff3e6a073afe655f1c2aa13e007ce5a6bc91f914d4dcb9e71cd000fa57?
s=60&d=retro&r=g)

### 󠀁[Doesn’t work, abandoned](https://wordpress.org/support/topic/doesnt-work-abandoned/)󠁿

 [Ivan Hryhorenko](https://profiles.wordpress.org/land0r/) 26. April 2024 1 reply

Unfortunately, plugin doesn’t work and abandoned. On official Github repository 
you can find this text: v4 of the plugin is no longer supported as of June 2023.
We are no longer providing new features or bugfixes for that release. Please upgrade
to v5 as soon as possible. OAuth0 Github But irony that v5 doesn’t work as well,
so both versions of plugin are just a waste of time

![](https://secure.gravatar.com/avatar/12ab618bd949b767981d237686145472703f5af0d4df2edfe9aae63fd7c6a1c0?
s=60&d=retro&r=g)

### 󠀁[Excellent Plugin Made by Excellent People](https://wordpress.org/support/topic/excellent-plugin-made-by-excellent-people/)󠁿

 [Donald Moore Jr.](https://profiles.wordpress.org/donaldwmoorejr/) 4. Dezember 
2021

I have some questions about signing JWT’s, but other than that, the documentation
is exhaustive, which is one of the reasons why I chose it. You can tell when a project
is put together well.

![](https://secure.gravatar.com/avatar/d72add6b21889fb6373922dd04eefb8c29f36800115e7298d18cc103a88d46d8?
s=60&d=retro&r=g)

### 󠀁[Great Plugin. Best for SSO between sites.](https://wordpress.org/support/topic/great-plugin-best-for-sso-between-sites/)󠁿

 [Menn](https://profiles.wordpress.org/mennstudio/) 17. April 2021

I use multiple WordPress sites and other member platform. When I set every site 
login via Auth0, it creates seamless experience for users. I decide to user only
Passwordless email. This will help people secure their accounts (because of no password
to remember and no easy password remains.)

![](https://secure.gravatar.com/avatar/46d0e86591ca5d25a7ed7b8e45b3e68efd24c65b754e4a3466a6b0c88bccf4b7?
s=60&d=retro&r=g)

### 󠀁[Fails at times for no apparent reason](https://wordpress.org/support/topic/fails-at-times-for-no-apparent-reason/)󠁿

 [svax](https://profiles.wordpress.org/svax/) 19. Februar 2021

Multiple users are not allowed to login getting the error : «This site requires 
a verified email», even though this is not enabled in the settings. I’ve tried reporting
this, getting absolutely zero response after 6 months…

 [ Read all 17 reviews ](https://wordpress.org/support/plugin/auth0/reviews/)

## Contributors & Developers

“Login by Auth0” is open source software. The following people have contributed 
to this plugin.

Contributors

 *   [ Auth0 ](https://profiles.wordpress.org/auth0/)
 *   [ evansims ](https://profiles.wordpress.org/evansims/)

“Login by Auth0” has been translated into 2 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/auth0/contributors)
for their contributions.

[Translate “Login by Auth0” into your language.](https://translate.wordpress.org/projects/wp-plugins/auth0)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/auth0/), check out 
the [SVN repository](https://plugins.svn.wordpress.org/auth0/), or subscribe to 
the [development log](https://plugins.trac.wordpress.org/log/auth0/) by [RSS](https://plugins.trac.wordpress.org/log/auth0/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

[Complete list of changes for this and other releases](https://github.com/auth0/wp-auth0/releases)

## Meta

 *  Version **4.6.2**
 *  Last updated **2 Jahren ago**
 *  Active installations **10'000+**
 *  WordPress version ** 6.5.5 or higher **
 *  Tested up to **6.5.8**
 *  PHP version ** 7.4 or higher **
 *  Languages
 * [English (US)](https://wordpress.org/plugins/auth0/), [Japanese](https://ja.wordpress.org/plugins/auth0/)
   und [Ukrainian](https://uk.wordpress.org/plugins/auth0/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/auth0)
 * Tags
 * [authentication](https://de-ch.wordpress.org/plugins/tags/authentication/)[multi-factor](https://de-ch.wordpress.org/plugins/tags/multi-factor/)
   [security](https://de-ch.wordpress.org/plugins/tags/security/)[Single Sign-on](https://de-ch.wordpress.org/plugins/tags/single-sign-on/)
   [social](https://de-ch.wordpress.org/plugins/tags/social/)
 *  [Advanced View](https://de-ch.wordpress.org/plugins/auth0/advanced/)

## Ratings

 3.1 von 5 Sternen.

 *  [  8 5-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/auth0/reviews/?filter=5)
 *  [  2 4-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/auth0/reviews/?filter=4)
 *  [  0 3-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/auth0/reviews/?filter=3)
 *  [  0 2-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/auth0/reviews/?filter=2)
 *  [  8 1-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/auth0/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/auth0/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/auth0/reviews/)

## Contributors

 *   [ Auth0 ](https://profiles.wordpress.org/auth0/)
 *   [ evansims ](https://profiles.wordpress.org/evansims/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/auth0/)