WordPress OpenID Connect login with passkeys
Sign-in with Dazr Identity: free OpenID Connect, hosted in the EU, with passkeys, email codes and Google or Microsoft accounts behind one button.
You need three values from the developer console: the client ID, the client secret (web server apps only) and the redirect URI you registered. Everything else comes from the discovery document at https://identity.dazr.eu/.well-known/openid-configuration.
WordPress
Use a generic OpenID Connect client plugin, such as OpenID Connect Generic Client. Register a web server app and fill in the plugin settings with the values below. The plugin shows the redirect URI to register on its settings page; by default it is https://example.com/wp-admin/admin-ajax.php?action=openid-connect-authorize.
| Setting | Value |
|---|---|
| Client ID | your client ID |
| Client secret | your client secret |
| Scope | openid profile email |
| Login (authorization) endpoint | https://identity.dazr.eu/oauth/authorize |
| Token endpoint | https://identity.dazr.eu/oauth/token |
| User info endpoint | https://identity.dazr.eu/oauth/userinfo |
| End session endpoint | https://identity.dazr.eu/oauth/logout |
| Identity key | sub |
| PKCE | on (S256) |
Setting names differ a little between plugins. If a plugin has no PKCE option, choose another one: Dazr Identity rejects sign-ins without PKCE.
sub claim is pairwise: the same for every app of your organisation, different for every other organisation. It never changes for a person, while an email address can. Store sub as the account key and treat email as contact data.
More for developers
Developer docsAll integration guidesAny OpenID Connect libraryPricing