Login with Entra External ID (CIAM) Single Sign-On (SSO) for WordPress

Overview

Set up Single Sign-On (SSO) on your WordPress website via Entra External ID (CIAM) SSO using our OAuth & OpenID Connect Single Sign-On plugin for WordPress. Implementing SSO for WordPress using Entra External ID (CIAM) allows users to log into your websites and applications with Entra External ID (CIAM) credentials. Entra External ID (CIAM) acts as the OAuth Provider and WordPress acts as the OAuth Client. Entra External ID (CIAM) SSO for WordPress provides smooth login between WordPress and Entra External ID (CIAM) using Entra External ID (CIAM) SSO login with a single click. The SSO for WordPress plugin also provides advanced Entra External ID (CIAM) SSO features like user profile attribute mapping, and role mapping. You can also protect your complete WordPress site behind Entra External ID (CIAM) SSO. Entra External ID (CIAM) OAuth SSO plugin secures the user's login process and improves user authentication using Entra External ID (CIAM) SSO for WordPress. Follow the steps in the guide below to set up your SSO for WordPress via installing this plugin.

Download Plugin Pricing Plans Free Trial

Note: Achieving Single Sign-On (SSO) integration between Entra External ID (CIAM) and WordPress requires the paid version of the OAuth Single Sign-On (SSO) plugin for WordPress. You can test the integration on our sandbox trial, which comes with full support for evaluation purposes.

Pre-requisites : Download And Installation

• Go to https://portal.miniorange.com and log in with your miniOrange account which you have used to purchase the license.
• Go to the Downloads tab and download the Plugin.
• Now, go to WordPress activate the downloaded plugin.
• Log into the plugin with the account under which you have purchased the license.
• Enter your license key (The license key is under the Manage License -> License Keys section).

Steps to configure Entra External ID (CIAM) Single Sign-On (SSO) Login into WordPress

1. Setup Entra External ID (CIAM) as OAuth Provider

• Sign in to the Microsoft Azure portal.
• Select Azure.

• Go to Overview and copy the Tenant ID.

• Go to Domain names on the left-hand side and copy the subdomain.

• Go to App registrations → New registration → create a new application.

• Register an application → configure the required settings → then click Register.

• Copy the Client ID and keep it handy for configuring the OAuth plugin.

• Go to Certificates & secrets → create a new client secret → click on Add.

• Copy the client secret value and keep it handy for configuring the OAuth plugin.

• Go to Authentication and add the redirect/callback URL if needed.




You've successfully configured SSO for WordPress using Entra External ID (CIAM) as OAuth Provider, allowing users to log in to your WordPress site with their Entra External ID (CIAM) credentials.

2: Setup WordPress as OAuth Client

• Go to Configure OAuth tab and search your application name to add a new client application into your website, Here Custom OpenID Connect APP.

• Configure App Name, Client ID, Client Secret, Domain from Entra External ID (CIAM) SSO application
• Please refer the below table for configuring the Scope & endpoints for Entra External ID (CIAM) in the plugin.



Scope:	openid profile email
Authorize Endpoint:	https://<subdomain>.ciamlogin.com/<tenant-id>/oauth2/v2.0/authorize
Access Token Endpoint:	https://<subdomain>.ciamlogin.com/<tenant-id>/oauth2/v2.0/token


• Choose your Grant Type from the list of options. Click on Save Settings to save the configuration.
• Then click on Test Configuration to test the configuration. You will see all the values returned by your OAuth Provider to WordPress in a table. If you don't see value for First Name, Last Name, Email or Username, make the required settings in your OAuth Provider to return this information.




You have successfully configured WordPress as OAuth Client to enable Entra External ID (CIAM) Single Sign-On (SSO) with WordPress, allowing user authentication through the Entra External ID (CIAM) login.

3. User Attribute Mapping

• User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.

Finding user attributes

• Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown.

4. Sign In Settings

In conclusion, after successfully configuring Entra External ID (CIAM) as an OAuth Provider and WordPress as an OAuth Client, you've achieved a smooth and secure authentication process for your users. Through Entra External ID (CIAM) Single Sign-On (SSO), you can ensure a robust user experience within the WordPress environment. This allows user authentication through the Entra External ID (CIAM) login. Through the integration of Entra External ID (CIAM) with WordPress, users can securely log into their WordPress accounts with their existing Entra External ID (CIAM) credentials.

Related Articles

• What is OAuth 2.0 and how does it work?
• Single Sign-On (SSO) OAuth / OpenID Connect / JWT for WordPress
• Frequently Asked Questions(FAQs)