A step by step installation instruction of the Identityplus WordPress plugin … Hopefully you will not encounter difficulties during the installation process but if you, feel free to send us a support request and we’ll help clarify things. That said, the installation does not require you to have any special knowledge, just follow the steps and enjoy the end result: DOWLOAD & ACTIVATE THE PLUGIN- You will need access to your Worpress installation files, and we recommend that you have the latest Worpress although we’ve tested the plugin back to WordPress 3.9.
- We recommend you start by downloading the Identityplus Worpress Plugin.
- Upload it into the /wp-content/plugins directory of your WordPress, alongside your other plugins, using your favorite method (ftp, sftp, scp, etc…)
- Activate the plugin and go to the Settings/Identityplus section. You will see an error that the certificate is missing but that is normal at this stage.
SIGN UP FOR Identityplus AND AUTHENTICATE YOUR BROWSER- Sign up for an Identityplus account, if you haven’t already.
- Install a certificate on your browser to access all the sections of your Identityplus account.
- We recommend you certify your other devices at this stage (mobile, tabled, whatever you have).
- Please don’t forget to set up a PIN, you will have to use it occasionally if your certificate becomes idle.
ISSUE AN API CERTIFICATE FOR YOUR WEB SITE- In your Identityplus dashboard, hit “Advanced” and select “API Domains”
- Add your blog’s domain. For example if your blog can be found at http://www.myblog.me, then the domain you register should be “www.myblog.me”.
- After adding it you need to verify your ownership of the domain, by downloading a file from Identityplus, uploading it into the root of your website and than click verify. Sorry, but this is an essential security step, both for you to make sure you specified the domain correctly but also to prevent others from impersonating your site.
- Now you can go to the “API Certificates” section, click “Add Web Site”. Follow the steps to issue the certificate: select the domain, select the type of certificate and hit next.
- At this stage you will have access to the password the certificate will be encrypted with. Copy it into the clipboard and paste it into the designated space in the Identityplus configuration in your WordPress.
- Download the certificate from your Identityplus Dashboard and upload it into the Identityplus settings of your Worpress instance. (hit save settings)
VERIFY- If everything went well so far, your local wordpress admin user is already bound to your Identityplus account and you are almost done.
- You can see this in the “Behavior” section. Make sure your user is bound before you continue to prevent locking yourself out of your WordPress.
- Best way to test this, is by taking your other device that is connected with Identityplus, the one you don’t regularly use to visit your /wp-admin section, and go to your bolgs /wp-admin section. If you are logged in automatically, your are all set.
- Alternatuvely, you can selectively delete all the cookies that were set by your blog to invalidate your session and log in.
- You can also test it by trying to log out of WordPress (this will delete your authentication cookies). If you are logged back in immediately Identityplus is working.
CONFIGURE- By checking “Enforce Identityplus Device Certificate” you make sure access to your filtered pages can only be done with valid Identityplus certificates.
- If you do not want users to register with your WordPress and you know only you are accessing the admin section you can also tick “Lock Down”. This means that even if the user is comming with a valid Identityplus certificate, but that certificate is not any one that is already connected, access will be denied.
- That is all, no more bots on your login page. You can also enforce the use of Identityplus certificates for commenting, this will give you the power to block the spammer whenever you mark a comment as spam and be an active participant in the Network of Trust.
- You can try accessing your wp-admin section from a different computer, see what happens and enjoy piece of mind.
EXTREME MEASURES- If the certificate in your browser expires, or you manually revoke it you will not be able to access your blog. This conflict needs to be resolved on Identityplus. Simply issue a new certificate for your browser, install it and all will be back to normal.
- You lose your device and it’s connected to your Identityplus. Take your other device, go to Identityplus and revoke the certificate of your lost device. This will revoke access to any Identityplus bound account, so you are safe.
You locked your self out of your WordPress. No problem. a. You need to go to your Worpress back-end, (access the files). b. In your wp-content/plugins/identity-plus/lib folder, edit the initialize.php file. c. Uncomment this line: // if(True) return “Manually disabled …”; d. Access your WordPress using user name and password e. Uninstall the plugin and perform a fresh install |