Directory / plugin
SSO Enforcer for Jetpack
v1.1.1 · by andrewcalvo
Make WordPress.com sign-in mandatory on sites that use Jetpack SSO. Username and password logins are turned off.
About this plugin
Jetpack’s Secure Sign-On (SSO) lets people log in to your site with their WordPress.com account, but it only adds that as an option. The username and password form stays available, so anyone with a password can still sign in without WordPress.com and skip its two-step authentication and account protections.
SSO Enforcer for Jetpack makes WordPress.com sign-in the only way in. While enforcement is on, it:
- Sends
wp-login.phpvisitors straight to WordPress.com to sign in - Hides the local username and password form
- Blocks password logins over XML-RPC and application passwords, which skip
wp-login.php
Use it when you want every account on your site to sign in through WordPress.com, for example to require two-step authentication for all administrators and editors.
Jetpack’s own connection to WordPress.com keeps working. If an integration still needs a username and password or an application password, check Allow application passwords and XML-RPC password logins on the settings page.
The plugin only enables enforcement when Jetpack is installed, the site is connected to WordPress.com, Jetpack WordPress.com login (SSO) is enabled, and the enabling administrator is linked to WordPress.com.
Deactivating or deleting the plugin immediately stops enforcement and restores your previous Jetpack SSO behavior.