CSR24 OAuth SSO With WordPress as OAuth Server | CSR24 SSO using WordPress

Overview

The miniOrange OAuth Server plugin for WordPress enables Single Sign-On (SSO) into the CSR24 app using your existing WordPress credentials. Once configured, users can log in to your CSR24 application directly through WordPress — no separate CSR24 password required. The OAuth Server plugin also allows you to send custom WordPress user attributes to your CSR24 app as per your requirements.
To know more about other features we provide in OAuth Server plugin for WordPress, you can click here.

Pre-requisites : Download And Installation

• Log into your WordPress instance as an admin.
• Go to the WordPress Dashboard >> Plugins and click on Add New Plugin.
• Search for OAuth Server Single Sign-On (SSO) plugin for WordPress and click on Install Now.
• Once installed click on Activate.

Configuration Steps

Step 1: Configure WordPress as the OAuth Server

• In your WordPress admin panel, go to miniOrange OAuth Server in the left-hand menu.
• Search for Custom OpenID Connect Client and click its icon to begin adding a new client.



• Enter the Client Name as CSR24.
• In the Redirect URI field, enter the following URL https://{CSR24-Portal-Site-URL}/mvc/login/openid/authcode, replacing {CSR24-Portal-Site-URL} with your actual CSR24 portal domain. Example: If your CSR24 portal is at myagency.csr24.com, the Callback url will be: https://myagency.csr24.com/mvc/login/openid/authcode



• Apply the following settings before saving:

Settings:	Value:
JWT Support	Selected
Signing Algorithm	RS256

• Click the Save Settings button.



• Once saved, note down your Client ID, Client Secret, and OAuth Endpoints (including the well-known configuration URL). You will need these in the next step.

Step 2: Configure CSR24 as the OAuth Client

• Log in to the CSR24 admin portal.
• Navigate to Self-Service Admin > Agency Information > Security Information > Third Party SSO.
• Enter the following details using the credentials and URLs you noted in Step 1:

Field	Value
Authorization Server URL	miniOrange well-known configuration URL (from Step 1)
Client ID	Copied from Step 1
Secret Key	Copied from Step 1
Scopes	openid profile email
Use Claims from ID Token	Selected — this allows CSR24 to read user details such as email address and profile information directly from the ID token issued by WordPress
OIDC Conformant	Not Selected
Access Token JWKS URL	Leave blank
Audience	Leave blank
Claims Namespace	Leave blank




• Save your changes.

Step 3: Test the SSO Connection

• Open an incognito/private browser window.
• Log in to WordPress using a test user.
• Make sure the same user/email exists or is expected in CSR24.
• Click the CSR24 SSO/login button from the WordPress site.
• The user should be redirected to CSR24.
• CSR24 should log the user in successfully.

You have now successfully configured Single Sign-On between CSR24 and WordPress. Your users can log in to CSR24 using their WordPress credentials, giving them a seamless, secure access experience without managing a separate password.

Related Articles

• What is Single Sign-On (SSO)?
• What is OAuth?
• OAuth Server Single sign-on (SSO) for WordPress
• Step Guide to enable miniOrange OAuth Server for WordPress
• Frequently Asked Questions (FAQs)