內容簡介
Sanch MultiDomain LDAP Auth for Active Directory 提供企業級的單一登入 (SSO) 和訪問控制，專為企業內部的 WordPress 網站設計。此外掛支援多森林環境，允許用戶無縫地對多個域控制器進行身份驗證，並嚴格執行基於路徑的訪問政策及動態角色傳播。
【主要功能】
• 多域與多 DC 身份驗證
• 強制內部網路登入
• 基於黑名單的路徑 ACL
• 嚴格的級聯過濾
• 即時用戶配置與角色同步
• LDAP 克隆保護
外掛標籤
開發者團隊
② 後台搜尋「Sanch MultiDomain LDAP Auth for Active Directory」→ 直接安裝（推薦）
原文外掛簡介
Sanch MultiDomain LDAP Auth for Active Directory provides enterprise-grade Single Sign-On (SSO) and access control for corporate WordPress intranets. Built for multi-forest environments, it allows users to authenticate seamlessly against multiple Domain Controllers while strictly enforcing path-based access policies and dynamic role propagation.
Key Features
Multi-Domain & Multi-DC Authentication: Connect and authenticate against multiple LDAP/LDAPS servers across different Active Directory domains/UPN suffixes.
Mandatory Intranet Login: The site is strictly private. All guests are automatically redirected to the login screen.
Blacklist Path-Based ACL: Once logged in, content is accessible to all staff by default. Easily restrict specific intranet sections, categories, and custom routes based on AD Group Membership (CN) or mapped WP Roles.
Strict Cascade Filtering: Restricting a category URL automatically hides all posts belonging to that category, even if the post’s permalink does not match the restricted URL path.
JIT Provisioning & Single Source of Truth: Automatic user creation on first successful AD bind, with strict role sync on every login.
LDAP Clone Protection: Detects and prevents authentication if multiple accounts match the same SAMAccountName across refined Base DNs.
