Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/tiafeno/wp-keycloak-sync/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Keycloak Realm Sync for WordPress
Authenticate WordPress users with Keycloak (OpenID Connect) and automatically synchronize users into a Keycloak realm upon login.
Description
Keycloak Realm Sync for WordPress integrates WordPress authentication with Keycloak using OpenID Connect (OIDC).
The plugin enables Single Sign-On (SSO) and automatically synchronizes users with a specified Keycloak realm during login.
It is designed for enterprise environments, microservices architectures, and any infrastructure requiring centralized Identity and Access Management (IAM).
Features
- [x] OpenID Connect (OIDC) authentication with Keycloak
- [x] WordPress login via Keycloak SSO
- [x] Automatic user creation in WordPress from Keycloak identities
- [x] Automatic synchronization of users into a Keycloak realm on login
- [ ] Profile synchronization (email, first name, last name)
- [ ] Role mapping from Keycloak roles to WordPress roles
- [ ] JWT validation and signature verification
- [ ] Secure OAuth2 flow
- [x] Admin configuration panel inside WordPress
- [x] Compatible with modern Keycloak versions
Requirements
- WordPress 5.0+
- PHP 8.1+
- Keycloak 12+
No external depandency (composer, npm, etc.)
Installation
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin through the "Plugins" menu in WordPress
- Navigate to Settings → Keycloak Realm Sync
- Configure:
- Keycloak Server URL
- Realm name
- Client ID
- Client Secret
- Admin Client ID
- Admin Client Secret
- Admin Realm (master)
- Enabled (Active SSO Authentification)
- Save settings
- Test authentication