• Hi,

    I am currently developing a WordPress-based system that allows students to login with their student portal account and editing their own academic profiles.

    Background
    ———–
    Our school has a separate student portal that manage all personal information of the students and this system also support CAS authentication for other system. We used to write our own PHP code for enabling CAS authentication with that student portal.

    However, this time, we choose WordPress as our platform since it has a complete content management system and plenty of choices of plugins. It can save our development time.

    Problem
    ———–
    After some research, we found that WP has a filter called “authenticate” that can help to intercept user input while logging in the WP and do some further processing (such as including other authentication method). However, in this way, we are still forced to use the original login form. May I know if there is a filter to completely replace the login form and the new login form will be used to enable CAS authentication? How to do this? Thanks.

    Since we are quite concern the security of the WP, we want the WP core can be updated though customization has been done. So, we avoid editing the wp-login.php and we prefer all editing is done on theme level.

    Can you share some experience with me? Thanks.

Viewing 2 replies - 1 through 2 (of 2 total)
  • I will suppose that you already checked the official WordPress documentation to customize the login page [1], so I will investigate a little bit about CAS to see how it can be integrated to the way WordPress works. I will post again when I have more information to share.

    [1] https://codex.www.ads-software.com/Customizing_the_Login_Form

    Dion

    (@diondesigns)

    The wp_authenticate() function is pluggable. If you write a plugin which contains that function, WordPress will use it for authentication.

    You’ll need to deal with registrations and lost passwords, and you’ll probably need to store your credentials in a separate table in the database. The registration and lost password issues can be handled by hooking the login_init action, parsing $_REQUEST for the appropriate variables, and taking over the handling of registrations and lost passwords where required

    Anyway, I hope this helps.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Using external login page to replace WordPress login form’ is closed to new replies.