Azure & Microsoft 365 Single Sign-On with OAuth / OIDC

Single Sign-On

The Single Sign-On (SSO) solution allows the secure user access to multiple applications using a single username and password. One-click access to all On-Premise and Cloud-based apps that IT Admin, security team, and end-users will relish to have for their organizational security.


Attribute / Role Mapping

Attributes are the user details that are stored in your Identity Providers. Attribute Mapping helps you to get user attributes from your IdP and map them to WordPress user attributes.Role Mapping is created to assign roles to users based on their attributes.



Integrations & Add-Ons

minOrange provides integration with many third party plugins like Learndash, BuddyPress, WooCommerce, Memberpress, Paid Membership Pro, etc and ready to use solutions for Page/Post restriction, Media restriction, SCIM User Provisioning, Anonymous User Login, SSO Session Management, etc.


JWT, Grant & Multisite support

This feature allows you to select any grant type based on your OAuth Provider. We support Authorization Code Grant, Resource Owner Credentials Grant (Password Grant), Implicit Grant, Refresh token Grant.


Force Authentication and Domain Restriction

This feature allows you to restrict site to logged in user. Here, enabling restrict site to logged in user will auto redirect the user to login page if user is not already logged in. We also provides an option to exclude the URL from auto redirect.


SCIM

WordPress SCIM User Provisioning allows you to sync user's creation, updation and deletion from your IDP to WordPress site. SCIM Automates the provisioning and deprovisioning process while reducing the risk of error.



Custom Redirect URL

Custom Redirect URL after login and logout. This feature allows you to configure the URL wherever you want to redirect users after login or after logout.


Customizations

You can use Login Widgets and ShortCode to easily integrate the login link with your WordPress site and also get access to a Wide range of Buttons with our customization feature.


Single Sign - On (SSO)


  • WordPress Single Sign-On (SSO) Grant Support:Standard OAuth2 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available).
  • Auto Create Users (User Provisioning): After Azure AD SSO & Office 365 Single Sign-On (SSO) is done, a new user automatically gets created in WordPress.
  • Linking User Account: After Azure AD SSO or Office 365 SSO into WordPress is done, if the user already exists in WordPress, then his profile gets updated or a new WordPress user is created.
  • OpenID Connect & OAuth Provider Support: WordPress Single Sign On (OAuth Login) supports any OpenID Connect & OAuth Provider.
OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

Attribute / Role Mapping

OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

  • Basic Role Mapping: Assign default role to user registering through OAuth Login based on rules which you define.
  • Advanced Role Mapping: Helps you to assign specific WordPress roles to users of a certain group(Self Service Group Management) in your IdP’s like Azure AD as IdP, Azure B2C as IdP or Office 365 as IdP or Microsoft 365 as IdP.
  • Attribute Mapping: OAuth Login allows you to map your Azure AD/B2C or office 365’s unique attribute with WordPress Username Attribute.
  • Custom Attribute Mapping: This feature allows to map any custom user attributes received from OAuth / OpenId Connect providers (Azure AD/B2C, Office 365) to map to any WordPress user attribute.
  • Advanced Attribute Mapping: Azure AD, Azure B2C, Office 365 Login provides the feature to map your IDP attributes to your WordPress site attributes like Username, Email, First Name, Last Name, Group/Role, Display Name.

Integrations & Add-Ons


  • WordPress Single Sign-On (SSO) Grant Support:Standard OAuth2 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available).
  • Auto Create Users (User Provisioning): After Azure AD SSO & Office 365 Single Sign-On (SSO) is done, a new user automatically gets created in WordPress.
  • Linking User Account: After Azure AD SSO or Office 365 SSO into WordPress is done, if the user already exists in WordPress, then his profile gets updated or a new WordPress user is created.
  • OpenID Connect & OAuth Provider Support: WordPress Single Sign On (OAuth Login) supports any OpenID Connect & OAuth Provider.
OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

Custom Redirect URL

OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

  • Redirect URL after Login : After successful login with Azure AD SSO or Office 365 SSO the plugin will automatically redirect the users to their WordPress site.
  • Custom Redirect URL after logout: WordPress OAuth Single Sign On (SSO) plugin allows you to auto-redirect Users to custom URL after he logs out from your WordPress site.
  • Attribute-Based Redirection: This plugin can be used to restrict and redirect users to different URLs based on Azure AD / Azure B2C / Office 365 IDP attributes

JWT, Grant & Multisite support


  • JWT Support: This feature enables users of JSON Web Token (JWT) from the OAuth2 / OpenID Connect server response.
  • WordPress Single Sign-On ( SSO ) Grant Support – Standard OAuth2 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available).
  • Multisite Support: Multi-Site environment is one that allows multiple subdomains/subdirectories to share a single installation. With the multisite premium plugin, you can configure Azure AD SSO, Azure B2C SSO, Office 365 SSO in minutes for all your sites in a network. *[If you have a basic premium plugin, you have to do plugin configuration on each site individually as well as for multiple Azure AD tenants.]
  • Multiple Userinfo Endpoints Support: This plugin (WordPress Single Sign On for Azure AD and Office 365) supports multiple Userinfo Endpoints.
OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

Force Authentication and Domain Restriction

OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

  • Force Authentication / Protect Complete Site: Allows the user to restrict login ( Single Sign-On ) / authorization for a particular site.
  • App domain-specific Registration Restrictions: You can restrict registration on your WordPress site based on the person’s email address domain.

SCIM


  • JWT Support: This feature enables users of JSON Web Token (JWT) from the OAuth2 / OpenID Connect server response.
  • WordPress Single Sign-On ( SSO ) Grant Support – Standard OAuth2 Grants: Authorization Code, Implicit Grant, Password Grant, Refresh Token Grant (Customization Available).
  • Multisite Support: Multi-Site environment is one that allows multiple subdomains/subdirectories to share a single installation. With the multisite premium plugin, you can configure Azure AD SSO, Azure B2C SSO, Office 365 SSO in minutes for all your sites in a network. *[If you have a basic premium plugin, you have to do plugin configuration on each site individually as well as for multiple Azure AD tenants.]
  • Multiple Userinfo Endpoints Support: This plugin (WordPress Single Sign On for Azure AD and Office 365) supports multiple Userinfo Endpoints.
OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

Customizations

OAuth/OpenID/OIDC Single Sign On (SSO), AzureB2C SSO Login Azure AD B2C

  • Force Authentication / Protect Complete Site: Allows the user to restrict login ( Single Sign-On ) / authorization for a particular site.
  • App domain-specific Registration Restrictions: You can restrict registration on your WordPress site based on the person’s email address domain.
Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com