Drupal Wild Apricot Single Sign-On (SSO) Login using OAuth / OpenID connect

Drupal OAuth/OpenID Connect SSO integration enables SSO between the Drupal site and Wild Apricot. This setup guide helps in configuring Single Sign-On (SSO) between the Drupal site and Wild Apricot using the OAuth/OpenID Connect module. This module is compatible with Drupal 7, Drupal 8, Drupal 9, and Drupal 10. When you incorporate the OAuth/OpenID Connect module with the Drupal site, you can log into the Drupal site seamlessly with Wild Apricot credentials.

Setup Drupal as OAuth Client:

• After installing the module, navigate to the Configuration -> miniOrange OAuth Client Configuration -> Configure OAuth tab and select Wild Apricot from the Select Application dropdown list.
• Copy the Callback/Redirect URL and keep it handy.

  Please note: If you have an HTTP Drupal site, and Wild Apricot enforces the HTTPS Redirect URI. Please navigate to the Sign In Settings tab of the module and set the base URL of the site with HTTPS in the Base URL text field.

• Enter the application name in the Display Name text field. For example, WildApricot

Create SSO Application in Wild Apricot:

• Log in to your WildApricot Admin panel and create a new app.
• Click on the Apps tab in the left panel.

• In the Apps tab, navigate to the Integrations section and click on the Authorized Applications card/box, as seen in the illustration below.

• As indicated in the image below, click the Authorize application button.

• Select Server application from the list of options under Application authorization and then click Continue.

• On the next screen, under Application details, enter the name in the Application name text field.

• In the same window, scroll to the bottom of the Authorization page settings section and check the option Authorize users via Wild Apricot single sign-on service.
• Paste the copied Callback/Redirect URL (from step 1) into the Trusted redirect domains text field.

Integrating Drupal with Wild Apricot:

• Navigate to the Wild Apricot portal.
• Click on Generate client secret button under Application credentials for user authorization.

• Now, copy the Client ID.

• Navigate to the Drupal's Configure OAuth and paste the copied Client ID into the Client ID text field.

• Go to the WildApricot Dashboard.
• Copy the Client secret from the Application credentials for user authorization section.
• To save the changes, click the Save button in the top header.

• Navigate to the Drupal's Configure OAuth and paste the copied secret into the Client Secret text field.

How to get Wild Apricot Organization Name:

• Again, go back to the WildApricot Application.
• Navigate to the Account tab, in the left side panel.
• In the top header's right side panel, click on the Organization tab.
• Copy the Organization name from the Organization details panel's General section.

• In the Drupal site, paste the copied Organization name into the Authorize Endpoint text field.

How to get Wild Apricot User ID/Member ID (aka Account ID):

When a new user is created in the WildApricot Application, a unique User ID is assigned to the user right away. When using the WildApricot Application, the generated User ID cannot be changed. The User will utilise it to identify which users can be eliminated from the system.

• To locate the User ID (Account ID) from the WildApricot Application, follow these steps:
• Navigate to the WildApricot Dashboard.
• From the left navigation panel, click on Account
• In the right side top header, click on the Billing tab.
• Copy the Account # from the General section.

• Navigate to the Drupal site and replace the copied Account # in the {account-id} with the Get User Info Endpoint URL.

• Click on the Save Configuration button.

You can also find the Wild Apricot Endpoints and Scope in the table below:

Test connection between Drupal and Wild Apricot:

• Click on the Perform Test Configuration button to test the connection between Drupal and Wild Apricot.

• On a Test Configuration popup, if you don't have any active sessions on the same browser, you will be requested to login into the Wild Apricot. After successfully logging into the Wild Apricot, you will be provided a list of attributes received from the Wild Apricot.
• Select the Email Attribute from the dropdown menu in which the user's email ID is obtained and click on the Done button.

• On the Attribute & Role Mapping tab, please select the Username Attribute from the dropdown list and click on the Save Configuration button.

Please note: Mapping the Email Attribute is mandatory for Single Sign-On.

Congratulations! You have successfully configured Wild Apricot as OAuth/OpenID Provider and Drupal as an OAuth Client.

How to perform the SSO?

• Now, open a new browser/private window and go to your Drupal site login page.
• Click on the Login using the Wild Apricot link to initiate the SSO from Drupal.
• If you want to add the SSO link to other pages as well, please follow the steps given in the image below: