Hey Asbell,
What your describing is OAuth.
I think you have three options:
If you’re only requiring login on one WP website, your best bet is using WordPress’ built in login system.
However, if you want to have a centralised login system for various different sites or apps to log in to, OAuth is what people use.
When I learnt the basics of how this works I used YouTube but to summarise:
This is made up of an authentication server and a resource server.
– The user goes to your site.
– They click login.
– They get redirected to a different site with your authentication server.
– They login in on this site.
– They receive a couple of tokens and get redirected back to the site they requested login from.
– The user uses the OAuth token like a password to get and post information to the OAuth resource server which stores user data.
I’m pretty sure plugins do exist that allow you to turn WordPress in to an OAuth server. This means you could use WordPress for your centralised data.
Alternatively, you can also get plugins which will allow you to use external OAuth services to login to WordPress. For example, the user clicks login on WordPress, they get redirected to Google or Facebook to login. They then get redirected back to your site as an authenticated user.
It all really depends on what you require for your solution but I hope this gives you enough info to help you research a solution.
Thanks,
Tom