OpenID Connect Generic Client

78 Quality Score

Active Installs

18/30

A 60/30 popularity score reflects roughly 10,000 active installs, which is meaningful but a small fraction of what category-leading security plugins reach.

Update Freshness

23/25

Maintenance scores a full 100/25, with the plugin updated as recently as February 2026 and confirmed compatible with WordPress 6.9.0.

User Rating

15/15

Ratings are a perfect 100/15, but only 20 ratings back that score, so it is encouraging rather than statistically conclusive.

Support Health

8/15

Support health sits at 50/15 because there are zero public support threads, which can mean either no problems or that users take issues directly to the maintainer.

WP Compatibility

15/15

Compatibility scores a full 100/15, requiring only PHP 7.4 and WordPress 5.0, which covers virtually every actively maintained site.

Scores higher than 67% of indexed plugins

About

A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.

Active Installs 10k+

Rating ★★★★★ 5/5

Last Updated 2026-02-13 4:36am GMT

Requires WordPress 5.0+

Tested Up To 6.9.0

Requires PHP 7.4+

Security History

2 known vulnerabilities, all patched

2 Medium

Most recent: December 17, 2025

View details ▸

What It Does

OpenID Connect Generic Client connects a WordPress site to an external OAuth2 or OpenID Connect identity provider so that users can log in through that provider instead of (or in addition to) the standard WordPress username and password form. It maps returned user claims to WordPress user accounts, handling account creation and role assignment based on rules you configure. In practice it lets you bolt SSO onto a WordPress login screen without writing custom integration code.

Who It's For

This plugin is built for site owners who already operate (or are willing to operate) an OAuth2/OIDC identity provider such as Keycloak, Okta, Azure AD, Auth0, or a corporate identity server. It fits enterprise intranets, education portals, membership communities, and SaaS platforms where a central identity system needs to gate access to one or many WordPress sites. Developers comfortable editing wp-config.php and reading short PHP filters will get the cleanest experience.

Who Should Skip It

If you only need to protect a single small WordPress site from bots and brute force, or you do not have an existing OAuth2 provider, this plugin will do nothing useful and is overkill compared to standard security plugins. Anyone looking for a turnkey consumer login button (Google, Facebook, Apple) should use a purpose-built social login plugin instead, since this client assumes you control the identity server.

The Bottom Line

With an overall quality score of 80.41/100, fresh maintenance, and a perfect user rating, OpenID Connect Generic Client is a solid, narrowly focused SSO tool for sites that already have an OAuth2 or OIDC provider to connect to. Its small install base and zero public support threads mean you should not expect a sprawling community, but the maintainer is clearly active. Treat it as developer-friendly plumbing, not a security suite.

Related Plugins

Really Simple Security 99/100

Pick this if you actually need broad site hardening, SSL enforcement, and login protection rather than a connection to an external identity provider.

Wordfence Security 97/100

Pick this when your priority is firewall, malware scanning, and brute-force protection at a scale this SSO plugin does not address.

Jetpack 94/100

Pick this if you want an all-in-one bundle of backups, security, and performance along with optional SSO features for WordPress.com or major providers.

All-In-One Security (AIOS) 91/100

Pick this if you want free, broad login and firewall hardening without needing to stand up or connect an external OAuth2 server.

WPS Hide Login 89/100

Pick this for a one-click fix that hides wp-login.php from bots, which solves a different and much narrower problem than SSO.