OAuth Login

OAuth Login for Additional Plesk Administrators

The OAuth Login extension for Plesk enhances the authentication capabilities of your Plesk server by enabling OAuth-based login for additional administrator accounts. This extension allows server owners to integrate third-party OAuth providers, offering a secure and streamlined login experience for Plesk admin users. It’s important to note that this extension is designed specifically for additional administrator accounts and does not apply to customer accounts or the main administrator account.

Key Features

• Seamless integration with popular OAuth providers for additional admin authentication
• Configurable OAuth settings directly within Plesk
• Customizable login button text
• Automatic mapping of OAuth logins to existing additional admin accounts based on email
• Strict security measures for OAuth implementation

Benefits

• Enhances security for additional admin access by leveraging trusted OAuth providers
• Simplifies authentication process for additional administrator accounts
• Reduces password management overhead for additional admin users
• Provides flexibility in login options for server owners
• Streamlines access for administrators with existing OAuth provider accounts

Security Features and Considerations

• No User Registration: The extension explicitly disables user registration functionality, ensuring that only existing additional administrator accounts can be linked with OAuth authentication.
• Secure Redirect URI Handling: Implements strict validation of redirect URIs, only allowing pre-configured and whitelisted URIs to prevent authorization code and token interception attempts.
• Token Security:
  • Enforces reasonable token expiration times
  • Implements secure handling of refresh tokens
  • Automatically rejects expired tokens
  • Validates token integrity on each request
• Scope Management: Implements strict scope control to ensure tokens have minimal necessary permissions, preventing potential security issues from excessive token privileges.

How It Works

1. Server owners configure OAuth settings, including provider URLs and credentials
2. Additional admin users can choose to log in via OAuth or traditional methods (unless OAuth is set as default)
3. Upon successful OAuth authentication, additional admin users are automatically logged into their Plesk account
4. The main administrator account and customer accounts continue to use traditional login methods

Important Note

This extension is designed exclusively for additional administrator accounts. It does not affect or apply to:

• The main administrator account
• Customer accounts
• Reseller accounts (if applicable)

These accounts will continue to use the standard Plesk authentication methods.

About the Developer

Developed by LJPc Solutions, a division dedicated to creating tailored software solutions, the OAuth Login extension is designed to seamlessly integrate with Plesk and provide a user-friendly interface for managing OAuth-based authentication for admin users. The extension includes an intuitive settings panel for easy configuration and management of OAuth parameters, ensuring a smooth setup process for server owners while maintaining robust security measures.