Sign-in with the Login add-on

The Login add-on adds Continue with Google, email verification, a captcha, login lockout, role redirects and signup rules to the free plugin’s sign-in page, signup form and sign-in popup. Every option is off until you switch it on.

Open Login Settings

1. Turn on Login under Turgor Exam Engine → Addons.
2. Click Settings on its card, or choose Login from the Addons flyout in the menu.

The Setup guide at the top of the screen opens step-by-step help for each topic below.

Add a Sign in button or popup

• Put [turgee_login_button] in any page, widget or Shortcode block. For a Create account button use [turgee_login_button view="signup"].
• In a header or menu, add a Custom link with the address #turgor-login (or #turgor-signup) and the text Sign in.
• For an Elementor button or any block, give it the CSS class tg-auth-open, or set its link to #turgor-login.

The Sign in links on course, lesson and quiz pages already open the popup. These # links stop opening a popup if you set your own Sign-in page address in the plugin’s Settings, or if another plugin changes the WordPress login address.

Google sign-in

1. In Google Cloud Console (console.cloud.google.com), create or pick a project and open APIs & Services → OAuth consent screen. Choose External, enter the app name and your support email, and save.
2. While the app is in Testing, only the test users you list can sign in. When you are ready for everyone, click Publish app; basic sign-in with email and profile needs no Google review.
3. Open APIs & Services → Credentials → Create credentials → OAuth client ID and choose Web application.
4. Under Authorised redirect URIs, add exactly the address shown in the Setup guide on your Login Settings screen.
5. Copy the Client ID and Client secret into the Google sign-in box, tick Turn on Google sign-in and save.
6. Test in a private window: Continue with Google appears on the login and signup forms and in the popup.

If Google says redirect_uri_mismatch, the redirect address does not match exactly; check http against https, and www. Administrators and other staff accounts are never linked to Google automatically at sign-in; they keep signing in with their password. Switch on email verification too, so nobody can pre-register your students’ addresses.

With the Student Dashboard, students can Connect Google or Disconnect Google from its Profile tab. Connecting asks for their current password, and the account owner gets an email. An account created through Google sets a password from the same tab before it can disconnect.

Email verification

Tick Require email verification and save. A new account made with the signup form then gets an email with a confirmation link, valid for 24 hours, and cannot sign in until it is clicked. Existing users, accounts you create yourself and Google sign-ins are not affected. Signing in again with the right password sends a new link, at most every 5 minutes.

Check that your site can send email (an SMTP mail plugin is recommended), or the link will never arrive.

Captcha

Choose Cloudflare Turnstile (free) or Google reCAPTCHA v2 (the I’m not a robot checkbox; v3 is not supported) as the provider, paste the site key and secret key, and save. Nothing is shown until both keys are saved.

• Turnstile: in the Cloudflare dashboard open Turnstile → Add site, enter your domain, choose the Managed widget, and copy both keys.
• reCAPTCHA: at google.com/recaptcha/admin create a site, choose reCAPTCHA v2 → I’m not a robot, add your domain, and copy both keys.

The captcha appears on the login, signup and forgot-password forms and in the popup. If the provider cannot be reached, sign-in is refused with a retry message rather than skipping the check.

Login lockout

Tick Turn on lockout and choose how many failed attempts lock an account (3 to 50) and for how many minutes (1 to 1440). A locked account refuses sign-in, even with the right password, until the time passes. Only wrong passwords and unknown usernames count.

Locked accounts are listed at the top of Login Settings; tick them and click Unlock selected. This is on top of the always-on limit per visitor address in the free plugin. If you lock yourself out, reset your password by email, or run wp option delete tg_lms_pro_login_lockouts.

Role redirects

Tick Turn on role redirects and give each role a page on this site, for example send Subscriber (students) to your dashboard page. After sign-in that role lands there instead of the home page. Someone who clicked Sign in on a lesson still returns to that lesson.

Signup rules

• Email domains – Allow any domain, Only allow the domains below (for a school or company) or Block the domains below (for disposable-email domains). One domain per line, for example school.edu. Matching is exact: school.edu does not cover student.school.edu, so list each one. The rule applies to Google sign-ups too.
• Email the site admin when someone signs up – a short notice to the admin email address for each new account.

See also: Getting started with Pro and Shortcodes reference.