WordPress (WP) SCIM plugin gives you the ability to automate user creation, update and delete process from existing IdP (Identity Provider) to your Wordpress (WP) site. SCIM is an open standard for securely Syncing / synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between WordPress site and PingOne SCIM as Identity Provider.

Features

 The following provisioning features are supported:

• Push New Users : New users created through PingOne will also be created in the WordPress site.
• Push Profile Updates (Premium Feature): Updates made to the user's profile through PingOne will be pushed to the WordPress site
• Push User Deactivation (Premium Feature): Deactivating the user or disabling the user's access to the application through PingOne will deactivate/delete the user in the WordPress site.

Note: For this application, deactivating/delete a user will depend on the configuration of miniOrange SCIM user provisioning add-on.

• Reactivate Users (Premium Feature): User accounts can be reactivated in the application.

Note: For the reactivating the user, it is required to select the Deactivation mode in the SCIM user provisioning add-on.

• Import Users (Premium Feature): Users can import active users from WordPress to PingOne.

 Future Enhancements in the Plugin:

• Import Groups
• Sync password
• Enhanced group push

Pre-requisites : Download And Installation

To configure PingOne as SAML IdP with WordPress, you will need to install the miniOrange SCIM user provisioning plugin:

SCIM user provisioning

By miniOrange

(1)

SCIM User Provisioning plugin, Create, Update, delete users from Azure AD, PingOne, OneLogin, G-suite, Centrify, PingOne, Idaptive, Gluu, WS02 and all SCIM …

 Tested upto 6.2

Get this plugin

To get the premium plugin, please contact us at samlsupport@xecurify.com

Follow the steps below for configuring PingOne SCIM user provisioning in WordPress (WP)

Step 1: Configure WP SCIM user provisioning plugin

• Install the premium plugin and login using your miniOrange credentials.
• You would require a license key to activate the plugin. (Note :- In case you already have the paid version of the miniOrange SAML 2.0 SSO plugin you won’t require a to login or license key).
• Select the Identity Provider as PingOne.
• You can find the SCIM Base URL and Bearer token in the SCIM configuration tab of the plugin.

Step 2: Configure PingOne for SCIM provisioning

• Go to PingOne portal and login with the administrator account.
• After logging in, you will need to add the environment for your application.
• In the left tab, under the Connections section, select the Provisioning.
• Click on + to add the new connection.
• Select the SCIM based connection type and click on Next.

• Under Create a New Connection, enter the Name and Description and click on Next.

• In the next step, under the Configure Authentication section, enter the SCIM BASE URL from the SCIM Configuration tab of the SCIM User Provisioning plugin.
• In the Authentication method field, select the OAuth 2 Bearer Token from the dropdown.
• Enter the SCIM Bearer Token in the OAuth Access Token field from the SCIM Configuration tab of the SCIM User Provisioning plugin and click on Test Connection button.

• In the Configure Preferences, keep the field information as default and click on Finish.

• Under the Connections tab, select the application you have configured then enable the toggle button displayed on the right hand corner.

• Navigate back to the Provisioning tab, click on New Rule button.

• Enter the name and description and click on Create Rule button.
• Under the Available Connection, select the configured application and click on Save.

• In the Custom Filter section, add the appropriate attributes in the Attribute field and its Value. Click on Save.

• Enable the toggle, to enable the rules.

• You can now assign the users by going to the Users tab under the Identities in the left pane.
• Click on Add User button to add user for provisioning.

You have successfully configured the miniOrange Wordpress SCIM User Provisioning plugin with PingOne.

Step 3: De-provisioning of Users [This is a premium feature]

• You can select the deprovisioning mode in the SCIM configuration tab of the SCIM User Provisioning plugin.
• By default, De-provisioning will delete the users from the WordPress site.

Step 4: Attribute Mapping for SCIM Users [This is a premium feature]

• Attribute Mapping feature allows you to map the user attributes sent by your IDP to the user attributes in the WordPress site. These attributes can be seen on right hand corner.
• Custom Attribute Mapping: This feature allows you to map any attribute sent by the IDP to the usermeta table of WordPress.
• Click on Add Attribute button to add custom attribute field.
• Under the Custom Attribute Name field, enter the attribute name you want to map.
• Under the Attribute Name from the IDP filed, select the IDP attribute from the dropdown that you want to map.
• Enable the toggle for an attribute if you want to display it in the WordPress Users table.Then Click on Save.

Step 5: SCIM Audit [This is a premium feature]

• SCIM Audit allows you to keep the track of all the provisioning activity taking place. It shows you the detailed information about each user being provisioned. This information includes the User Action, Status, Created Date etc.
• In the miniOrange SCIM User Provisoner plugin, naviagate to the SCIM Audit tab.
• Here you can see all the User provision information.

• Click on the Show Advanced Search button, to search the provisoned user details by using the search filters like Wordpress Username, IP Address etc.

• On clicking the Clear Reports button, you can clear all the user provisioned details.

Additional Resource

• What is SCIM User Provisioning?
• User Data Synchronization

Other Supported IDPs

Azure AD

Centrify

Google Apps

One Login

PingOne

Custom IDP

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com