Login with IMIS Single Sign-On (SSO) for WordPress | IMIS SSO for WordPress

Overview

Set up Single Sign-On (SSO) on your WordPress website via IMIS SSO using our OAuth & OpenID Connect Single Sign-On plugin for WordPress. Implementing SSO for WordPress using IMIS allows users to log into your websites and applications with IMIS credentials. IMIS acts as the OAuth Provider and WordPress acts as the OAuth Client. IMIS SSO for WordPress provides smooth login between WordPress and IMIS using IMIS SSO login with a single click. The SSO for WordPress plugin also provides advanced IMIS SSO features like user profile attribute mapping, and role mapping. You can also protect your complete WordPress site behind IMIS SSO. IMIS OAuth SSO plugin secures the user’s login process and improves user authentication using IMIS SSO for WordPress. Follow the steps in the guide below to set up your SSO for WordPress via installing this plugin.

Download Plugin

Pricing Plans

Free Trial

Note: Since iMIS is an enterprise application, achieving Single Sign-On (SSO) integration with WordPress requires the paid version of the OAuth Single Sign-On (SSO) plugin for WordPress. You can test the integration on our sandbox trial, which comes with full support for evaluation purposes.

Pre-requisites : Download And Installation

Go to https://portal.miniorange.com and log in with your miniOrange account which you have used to purchase the license.
Go to the Downloads tab and download the Plugin.
Now, go to WordPress activate the downloaded plugin.
Log into the plugin with the account under which you have purchased the license.
Enter your license key (The license key is under the Manage License -> License Keys section).

Steps to configure IMIS Single Sign-On (SSO) Login into WordPress

1. Setup IMIS as OAuth Provider

IMIS ASI
IMIS CSI (Cloud App)

Log in to IMIS Developer Console from here.
To create a new application, go to Settings -> Contacts -> Client Applications.
In Client Applications, click on Add Client application.

IMIS Single Sign-On (SSO) OAuth - Add new application

Enter the required details and click on Save button.

After successfully creating a new application, create a new Single Sign-On content item by following the below steps:

Go to RiSE > Page Builder > Manage content.
Create a new content record (New > Website Content).
Give the content record a Title.
From a content record, select Add content.
Open the Contact folder, then select the Single Sign-On content item.

Select the desired Client application.

Click OK, then click Save & Publish.
Open the Single Sign-On content which you just created. After opening it, copy the Publish location and keep it handy (this will be the authorization endpoint).

You've successfully configured SSO for WordPress using IMIS as OAuth Provider on your WordPress site, allowing users to use IMIS SSO login into the WordPress site with their IMIS SSO login Credentials.

Log in to IMIS Cloud Developer Console.
To create a new application, go to Cloud SSO -> Client Apps. Then click on Add Client App button.

Select the Identity technology as OpenID Connect.

Enter the required details like App/Integration name and add the Redirect/Callback URL which you will get from the OAuth Single Sign-On plugin. Then add the Profile IQA Query Path to fetch the logged-in user’s profile information (such as name, email, or membership data) from iMIS and pass it to the application during authentication. Finally, click the Save Client App button below.

Here you will get the Client ID and Client Secret. Keep them handy as we will require them later while configuring the OAuth Single Sign-On plugin for WordPress.

Now, go to the Domain Setup tab and copy and save the domain as we will require it later while configuring the endpoints in the OAuth Single Sign-On plugin.

You've successfully configured SSO for WordPress using IMIS Cloud App as OAuth Provider on your WordPress site, allowing users to use IMIS SSO login into the WordPress site with their IMIS SSO login Credentials.

2: Setup WordPress as OAuth Client

IMIS ASI
IMIS CSI (Cloud App)

Go to Configure OAuth tab and search your application name to add a new client application into your website, Here IMIS.

Configure App Name, Client ID, Client Secret, Domain from IMIS SSO application
Please refer the below table for configuring the Scope & endpoints for IMIS in the plugin.

Scope:	openid
Authorize Endpoint:	https://IMIS-SSO-endpoint
Access Token Endpoint:	https://IMIS-domain-name/token
Get User Info Endpoint:	https://IMIS-domian-name/api/User/?UserName=

Login with IMIS Single Sign-on (SSO) - Add App name, TenantID

Enable the checkbox for the Set Client Credentials in Body and Choose your Grant Type from the list of options. Click on Save Settings to save the configuration.

IMIS Single Sign-On (SSO) OAuth - Finish configuration

You will see all the values returned by your OAuth Provider to WordPress in a table. If you don't see value for First Name, Last Name, Email or Username, make the required settings in your OAuth Provider to return this information.

Note: If your Test Configuration is not successful, try adding a / at the end of the Callback URL in the plugin as well as the iMIS Developer Application, then test again..

Login with IMIS Single Sign-on (SSO) - OAuth Test Configuration

You have successfully configured WordPress as OAuth Client to enable IMIS Single Sign-On (SSO) with WordPress, allowing user authentication through the IMIS login.

Go to Configure OAuth tab and search your application name to add a new client application into your website, Here IMIS CSI (Cloud App).

Configure App Name, Client ID, Client Secret, Domain from IMIS CSI Cloud SSO application
Please refer the below table for configuring the Scope & endpoints for IMIS CSI Cloud in the plugin.

Scope:	profile openid
Authorize Endpoint:	https://IMIS-domain-name/openid/authorize
Access Token Endpoint:	https://IMIS-domain-name/openid/token
Get User Info Endpoint:	https://IMIS-domain-name/openid/userinfo

Enable the checkbox for the Set Client Credentials in Body and Choose your Grant Type from the list of options. Click on Save Settings to save the configuration. Then Click on Test Configuration button.

You will see all the values returned by your OAuth Provider to WordPress in a table. If you don't see value for First Name, Last Name, Email or Username, make the required settings in your OAuth Provider to return this information.

Note: If your Test Configuration is not successful, try adding a / at the end of the Callback URL in the plugin as well as the iMIS Developer Application, then test again..

You have successfully configured WordPress as OAuth Client to enable IMIS Single Sign-On (SSO) with WordPress, allowing user authentication through the IMIS login.

3. User Attribute Mapping

User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.

Finding user attributes

Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown.

IMIS Single Sign-On (SSO) - Attribute Mapping

4. Sign In Settings

WordPress 5.7 and below
WordPress 5.8
WordPress 5.9 and above

Go to WordPress Left Panel > Appearances > Widgets.
Select miniOrange OAuth. Drag and drop to your favourite location and save.

IMIS Single Sign-on (SSO) - create-newclient login button setting

Go to WordPress Left Panel > Appearances > Widgets.
Select miniOrange OAuth. Drag and drop to your favourite location and save.

Open your WordPress page and you can see the IMIS SSO login button there. You can test the IMIS Single Sign-On (SSO) - IMIS OAuth now.

Make sure the "Show on login page"option is enabled for your application. (Refer to the below image)

IMIS Single Sign-on (SSO) - IMIS OAuth - create-newclient login button setting

Now, go to your WordPress Login page. (Eg. https://< your-wordpress-domain >/wp-login.php)
You will see an IMIS SSO login button there. Once you click the login button, you will be able to test the IMIS Single Sign-On (SSO) - IMIS OAuth.

In conclusion, after successfully configuring IMIS as an OAuth Provider and WordPress as an OAuth Client, you've achieved a smooth and secure authentication process for your users. Through IMIS Single Sign-On (SSO), you can ensure a robust user experience within the WordPress environment. This allows user authentication through the IMIS login. Through the integration of Office with WordPress users can securely log into their WordPress accounts with their existing IMIS credentials.

FAQs

Why am I receiving a "Timeout Error (cURL Error 28)" while performing SSO with iMIS?

This error typically indicates that the connection to the external system (iMIS Identity Provider) is taking too long to respond, resulting in a timeout.

Cause: The server is unable to complete the request within the allowed time, often due to delayed responses from the IDP.

Resolution: To resolve this issue, increase the timeout settings in your php.ini file:

Set max_execution_time to 120 Set default_socket_timeout to 60

Contents