ARPA Single Sign-On (SSO) Integration with WordPress OAuth

miniOrange ARPA SSO application involves allowing users who have accounts in ARPA to Single Sign-On (SSO) login to a WordPress site using their ARPA credentials. This eliminates the need for users to create and manage separate accounts for both platforms, enhancing user experience and reducing administrative overhead.

  Introduction:

Welcome to this use case document on using ARPA as an identity provider (IDP) for Single Sign-On (SSO) with WordPress sites. In this document, we will explore the benefits of using ARPA as your IDP for SSO and how our solution can help you achieve Single Sign On (SSO) with WordPress OAuth plugin. By the end of this document, you will have a better understanding of how our ARPA SSO login solution can simplify user management and improve the user experience for your WordPress site.

  Pre-requisites : Download And Installation

  What is ARPA?

• ARPA Toscana is the acronym for the Regional Agency for Environmental Protection of Tuscany, also known as Agenzia Regionale per la Protezione Ambientale della Toscana in Italian. It is a public institution responsible for monitoring and safeguarding the environment in the Tuscany region of Italy.
• ARPA Toscana's main objective is to promote sustainable development and ensure the protection of natural resources, environmental quality, and human health within the region. The agency operates under the authority of the Tuscany Regional Council and collaborates with various stakeholders, including local governments, research institutions, and other environmental organizations.

  What is Single Sign-On?

• Single Sign-On (SSO) is a powerful mechanism that allows users to authenticate themselves only once, and subsequently, they can access multiple applications or sites without the need to log in again. This eliminates the hassle of remembering multiple usernames and passwords, thereby improving convenience and productivity. SSO can be implemented using different protocols such as OAuth, SAML, OpenID Connect, or custom APIs.
• In this particular use case of SSO using ARPA, It enables organizations associated with ARPA to provide their users with a unified login experience, granting them access to various services and resources without the need for separate login credentials.

  How to achieve SSO with ARPA using WordPress OAuth Client?

• After downloading and activating WordPress OAuth Single Sign-On (SSO) plugin, Navigate to ‘Configure OAuth’ tab and click ‘Add New Application’ to add a new client application into your website.


• Choose your Application from the list of OAuth / OpenID Connect Providers, Here choose ‘Custom OAuth 2.0 App’.


• For OAuth Provider Configuration, you would need the Callback URL which you will get from miniOrange OAuth Single Sign-On plugin, this you need to configure at the developer application which is created at ARPA end.
• After your developer application is approved by ARPA, you will receive a Client ID and Client secret. Please enter these credentials in the plugin's corresponding fields.
• For configuring the Scope & Endpoints in the plugin. Refer to the table below.



Scope	profile email phone
Authorization Endpoint	https://< your-arpa-domain>/auth/realms/enti/protocol/openid-connect/auth
Access Token Endpoint	https://< your-arpa-domain>/auth/realms/enti/protocol/openid-connect/token
Get User Info Endpoint:	https://< your-arpa-domain>/auth/realms/enti/protocol/openid-connect/userinfo




• After you have entered all the informations, Click on Finish to save the configuration.



• You will get a test successful prompt with the attributes after saving the configurations. If you encounter an error and your test fails, Kindly reach ou to us on oauthsupport@xecurify.com

  User Attribute Mapping

• User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.

Finding user attributes

• Go to Configure OAuth tab. Scroll down and click on Test Configuration.

• You will see all the values returned by your OAuth Provider to WordPress in a table. If you don't see value for Email or Username, etc. make the required settings in your OAuth Provider to return this information.
• Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown. After selecting the attributes, Click on Save Settings and you are done.

Now, You have seamlessly integrated WordPress as an OAuth Client to enable user authentication through ARPA's Single Sign-On (SSO) login on your WordPress site. This integration allows users to effortlessly log in to your WordPress platform using their ARPA SSO credentials.

Additional Resources

• ARPA as OAuth Provider / OpenID Connect for SSO
• What is OAuth 2.0 and how does it work?
• Frequently Asked Questions (FAQs)