WPO365
Plugin for WordPress websites that require a user to sign in (e.g. with Microsoft using the WPO365 plugin) and that are loaded inside an iframe (e.g.
The facts
- Rating
- 5★ from 2
- Active installs
- 200+
- Price
- Free
- Last updated
- 20 Jan 2025
- Added
- Aug 2020
- Requires WP
- 5.0
- Tested up to
- WP 6.7.7
- Requires PHP
- 7.4
- Downloads
- 5,162
Our analysis
AI-assistedWPO365 | SAMESITE is a WordPress plugin designed for websites that require user sign-in, particularly when loaded in an iframe, such as within a Microsoft Teams app or tab. It modifies the WordPress function wp_set_auth_cookie to set the SameSite attribute to None, facilitating third-party cookie usage. For effective operation, the website must be secured with SSL, as the SameSite=None flag is only respected by certain browsers when the Secure flag is present.
This plugin is suitable for users who need to integrate Microsoft sign-in functionality within iframe contexts. It is particularly useful for developers and website administrators working with Microsoft Teams or similar platforms who require cookie support for user authentication.
Best for: This plugin suits WordPress sites needing Microsoft sign-in within iframe contexts.
What it does well
- ✓Free to download from the WordPress.org directory
- ✓Enables third-party cookie usage for iframes
- ✓Supports Microsoft sign-in integration
- ✓Author offers support for issues
- ✓Open source code available on GitHub
Where it falls short
- •Requires SSL for proper functionality
- •Limited testing across all WordPress configurations
Verdict
WPO365 | SAMESITE provides a specific solution for handling cookies in iframe scenarios, especially for Microsoft integrations. It may be beneficial for those with the necessary technical setup.
From the developer
Marco van Wieren's own description of WPO365, lightly tidied.
Plugin for WordPress websites that require a user to sign in (e.g. with Microsoft using the WPO365 plugin) and that are loaded inside an iframe (e.g. inside a Microsoft Teams App / Tab or similar). The plugin overrides the pluggable WordPress function wp_set_auth_cookie to always set SameSite=None to enable third-party usage of cookies.
Prerequisites
- The SameSite=None flag is only respected by browsers such as Chrome when the cookie’s Secure flag is set. Therefore the website must use SSL for the plugin to effectively enable browser support for 3rd party cookies.
Support
I will go to great length trying to support you if the plugin doesn’t work as expected. Go to our Support Page to get in touch. I haven’t been able to test our plugin in all endless possible WordPress configurations and versions so I am keen to hear from you and happy to learn!
Feedback
I am keen to hear from you so share your feedback with me on Twitter and help me get better!
Open Source
When you’re a developer and interested in the code you should have a look at the corresponding gist at github.