• Is there any way with this plugin to allow a handful of local WordPress accounts to exist that aren’t authenticated through CAS? We’re currently using Active Directory to authenticate our users, but we have one or two users that are not in AD; if we change over to using CAS, we would still need to be able to allow those one or two users to authenticate on our system without having AD accounts. Thanks.

    https://www.ads-software.com/plugins/cas-maestro/

Viewing 11 replies - 1 through 11 (of 11 total)
  • I am also interested by this features because I could have users in openldap with cas and users in wordpress without cas.

    Thanks

    Plugin Author Henrique Mouta

    (@vaurdan)

    Hey!
    We are going to see what is the best approach to have this functionality ??

    Thanks!

    Thread Starter Curtiss Grymala

    (@cgrymala)

    Thanks for looking into this. For my purposes, it would even be good enough if I could add a query parameter to wp-login.php to override the redirect to CAS, I think. I can probably whip up a patch for that if you’d like. Thanks.

    +1 for this as well (a query parameter would work for us too). We have a system that we’re integrating with CAS but our users will have access for ~6 months after they’ve left our university so having a fallback option to get them into the system (or with a query parameter we could provide a special entrypoint) is a must.

    Plugin Author Henrique Mouta

    (@vaurdan)

    Hey,

    We’re working on that, at the moment we have implemented a query parameter (wp-login.php?cas_bypass) to bypass CAS Authentication. It also allows registration of new users, if it is enabled in the WordPress settings.

    But we need a opinion… Do you thing that we should allow Password Recovery? This will allow any user (even if it as CAS user) to change is password using the email, and make possible to that CAS user login using the WordPress login form and the usual CAS page.

    What do you think?

    Hmm, I’m assuming they wouldn’t even see the password recovery option unless they were using the bypass parameter? I’m thinking in our case this option would be necessary because after the user is no longer in CAS they will have no idea what their password in WordPress should be and it would be much easier to support by having them reset themselves and login rather than us having to manually assign and send a password to them. So I’d say yes keep the option for password resets.

    Plugin Author Henrique Mouta

    (@vaurdan)

    Hey,
    This was been implemented and released just now.
    To login using WordPress accounts, you must use the /wp-login.php?wp URL.

    When you test it, please give us feedback, we would love to hear what you think ??

    Thanks for your help!
    Henrique

    Works like a charm. Thank you all so much for such a quick response to this!

    Two quick questions/issues in a similar vein:

    Once I have activated CAS Maestro, I am unable to create new users in WordPress because the Password field disappears in the User creation screen. Is this intentional, or a bug — and do you know how I can get around it?

    Second: the reason I’m using CAS login is to allow users to sign in with their (preexisting) University credentials. But there are some users who were created manually in WordPress — so the /wp-login.php?wp workaround is a lifesaver. However, I’m also trying to restrict specific pages to only registered users, so I’ve implemented a plugin called Only for Registered Users. This seems to work nicely, but there’s no workaround for non-CAS accounts as far as I can tell. Any advice?

    Thanks!

    Plugin Author Henrique Mouta

    (@vaurdan)

    Hey waitfortheword!

    Yes, it is a bug, the password field should be visible when creating a new user. Going to fix it soon, thanks for the report!

    Regarding that “Only for Registered Users”, maybe I’ll have to fork that plugin to allow normal WordPress authentication, but there is no solution right now.

    Thanks.

    Just wanted to follow up on this: any progress in addressing the bug that hides the password field from the user setup screen? We’ve been temporarily de-activating the plugin in order to manually add new users through the dashboard as required in certain cases, but it’s problematic and disruptive — and confusing to any user who attempts to log “the normal way” while the plugin is deactivated. Thanks for your help.

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Local WordPress Accounts?’ is closed to new replies.