Turns WordPress or WordPress MU into a CAS single sign-on authenticator.
As of April 2026, wpCAS Server is a WordPress auth plugin with 10 active installations and a 0/5 rating0. It has been downloaded 2.5K+ times in total. Requires WordPress 2.8+ and PHP false+. Available on WordPress.org since 2009. Last updated 13 years ago — may have compatibility concerns. Top alternative: authLdap.
This plugin reserves a collection of URIs that create, validate, and destroy CAS tickets.
/cas/login :: If user is not authenticated he/she is redirected to the login page. Otherwise the user is redirected to the service specified as a GET variable in the URL – or if service is not provided, the user is redirected to the WordPress instance’s home.
/cas/logout :: The user’s session is destroyed, user is logged out of the WordPress instance, and redirected to $_GET[‘service’] (or the blog home if service isn’t provided)
/cas/proxyValidate and /cas/validate :: The CAS ticket must be passed as a GET parameter in the URL when calling /cas/validate. The ticket is validated and XML is output with either cas:authenticationSuccess or cas:authenticationFa…
| WordPress | 2.8+ requiredTested up to 2.9.2 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.