About WordPress
WordPress 5.6+ supports Application Passwords for REST clients. Iru callshttps://YOUR_HOST/wp-json/... with HTTP Basic (username + application password). HTTPS is required - Application Passwords are rejected over plain HTTP.
How It Works
Self-hosted 5.6+ or WordPress.com Personal+ (Free tier does not expose Application Passwords per product limits).
Official references: Application Passwords, REST API.
Prerequisites
- Administrator (or role that may issue Application Passwords).
/wp-jsonreachable and not blocked by security plugins.
Connect WordPress to Iru
- WordPress
- Iru Compliance
Complete this tab before you connect the source in Compliance.
1
Sign in to WordPress admin
Open
https://YOUR_HOST/wp-admin and sign in with a user who can edit Users and create Application Passwords (often an Administrator).2
Open Users
In the left admin menu, select Users → All Users, then click the user Iru will authenticate as (often a dedicated service account).
3
Open Profile
Select Edit (or Profile) for that user to open the profile screen.
4
Open Application Passwords
Scroll to the Application Passwords section (WordPress 5.6+). If it is missing, confirm the site allows Application Passwords and is served over HTTPS.
5
Create a new Application Password
Enter a name such as Iru Compliance, then select Add New Application Password (or Add). WordPress generates a spaced token.
6
Copy the token once
Copy the full application password string once. You may paste it into Iru with or without spaces; WordPress accepts both forms.
Continue on the Iru Compliance tab.
Troubleshooting
Nothing opens when you turn the source on
Nothing opens when you turn the source on
Check pop-up blocker settings for the Iru site and try again.
401
401
Correct password; plugin not blocking REST.
REST disabled
REST disabled
Security plugins - allow
wp-json.HTTP site
HTTP site
Enable TLS.
Related Articles
Sources Management
Browse and manage every Compliance source.
Getting Started With Compliance
Frameworks, actions, and Artifacts.
Iru Overview
How Endpoint, Compliance, and Identity fit together.
Artifacts Management
Upload, review, and organize evidence from sources and actions.