Centrify OAuth & OpenID connect Single Sign-On (SSO) | Centrify SSO Login

Step 1: Setup Centrify as OAuth Provider

• In the Admin Portal, select Apps > Web Apps, then click Add Web Apps.
• Click on Custom.
• On the Custom tab, next to the OAuth2 Client application, click Add
• In the Add Web App screen, click Yes to add the application.
• Now open the Settings page and enter all the required details and click on Save button.
• Copy your Client ID and Client Secret and save it on your miniOrange OAuth Client plugin Configuration.
• You have successfully completed your Centrify OAuth Server side configurations.

Centrify Endpoints and Scope:




Client ID :	Click Here
Client Secret :	Click Here
Scope:	all
Authorize Endpoint:	https://<centrify-domain>/oauth2/authorize/myapplication
Access Token Endpoint:	https://<centrify-domain>/oauth2/token/myapplication

You have successfully configured Centrify as OAuth Provider for achieving Centrify login into your WordPress Site.

Step 2: Setup WordPress as OAuth Client

• Go to Configure OAuth tab and click on Custom OAuth 2.0 application and configure App Name, Client ID, Client Secret from provided Endpoints.
• openid is already filled, you can also configure profile along with openid scope. That is enter openid profile in the scope field. .
• Click on Save Settings to save the configuration.

You have successfully configured WordPress as OAuth Client for achieving Centrify login into your WordPress Site.

Step 3: User Attribute Mapping.

• User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.

Finding user attributes

• Go to Configure OAuth tab. Scroll down and click on Test Configuration.

• You will see all the values returned by your OAuth Provider to WordPress in a table. If you don't see value for First Name, Last Name, Email or Username, make the required settings in your OAuth Provider to return this information.

• Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown.

Step 4: Login Settings / Sign In Settings.

• The settings in SSO Settings tab define the user experience for Single Sign-On. To add a login widget on your WordPress page, you need to follow below steps.

Sign In Settings

• Go to WordPress Left Panel > Appearances > Widgets.
• Select miniOrange OAuth. Drag and drop to your favourite location and save.

• Open your WordPress page and you can see the login button there. You can test the SSO now.

In this Guide, you have successfully configured Centrify Single Sign-On (SSO) by configuring Centrify as OAuth Provider and WordPress as OAuth Client using our WP OAuth Single Sign-On ( OAuth / OpenID Connect Client ) plugin.This solution ensures that you are ready to roll out secure access to your WordPress site using Centrifylogin credentials within minutes.

Additional Resources

• What is OAuth 2.0?
• Frequently Asked Questions (FAQs)