Apple Single Sign-On SSO | WordPress Login using Apple App



WordPress OAuth / OpenID connect Single Sign-On plugin enables login into your WordPress site using OAuth and OpenID Connect providers like Apple and other custom and standard providers. It supports advanced SSO features like user profile attribute mapping, role mapping etc. To know more about other features we provide in WP OAuth Single Sign-On ( OAuth / OpenID Connect Client ) plugin, you can click here.



You can download OAuth Client plugin using the following link.


Download And Installation

  • Log into your WordPress instance as an admin.
  • Go to the WordPress Dashboard -> Plugins and click on Add New.
  • Search for a WordPress OAuth Single Sign On plugin and click on Install Now.
  • Once installed click on Activate.

Step 1: Setup Apple as an OAuth Provider

  • First of all, go to https://developer.apple.com click on Account and Login with your Apple developer account.
  • apple single sign-on SSO Login to apple pple single sign-on SSO create apple account
  • Click on Certificates, Identifiers & Profiles tab.
  • apple single sign-on SSO login Certificates, Identifiers and Profiles
  • In the left menu Click on Identifiers and after that click on the Plus Icon(blue color) . Click on Continue for the next 2 pages.
  • apple single sign-on SSO login user Identifiers
  • Enter Description and Bundle ID for the App ID. (The Bundle ID should be in reverse-dns style string.)
  • apple single sign-on SSO login app Description
  • In the Capabilities section scroll down and select sign with apple and Click on Edit link.
  • apple single sign-on SSO login Capabilities and Enable as a primary App Id
  • Select Enable as a primary App Id and click on Save. Click on Continue and then click on Register.
  • apple single sign-on SSO primary App
  • In the right corner click on Continue and after that Register button.
  • Again click the Plus icon( blue color). Select Service IDs and click on Continue.
  • apple single sign-on SSO app Plusicon
  • Enter Description and Identifier( Identifier would be your client id). and click on the Continue and after that Register button.
  • apple single sign-on SSO login description and clientid
  • Click on Keys tab from the left menu.Click on the Plus icon to register a new key.
  • apple single sign-on SSO app register a new key
  • Give your Key a name, and select Sign In with Apple and click on Configure button.
  • apple single sign-on SSO login key
  • Select your Primary Id and click on the Save button and after that at the right corner click on Continue and Register button.
  • apple single sign-on SSO login app Register
  • Click on the Download button once the key is downloaded click on the Done button.
  • apple single sign-on SSO Download once the key is downloaded
  • In the left menu click on Identifiers and the right top click on App IDs.
  • apple single sign-on SSO select app id
  • Click on Service IDs from the drop down menu.
  •  single sign-on SSO select service IDs is apple AppIDs
  • Select your Service Id from the List.
  • single sign-on SSO select service IDs is apple AppIDs
  • Select Sign In with Apple and click on Configure button.
  • apple single sign-on SSO login app configure
  • Select the Primary App Id from the drop down, and Enter the Domain and Redirect URL in Domains and Subdomains and Return URLs respectively and click on the Next button (You will get the Domain name and Redirect URL from miniOrange plugin).
  • apple single sign-on SSO social login apple redirectURL
  • Verify the details and click on the Done button. After that at the right corner click on the Continue button.
  • Copy the Identifier value and click on the Save button.
  • apple single sign-on SSO app id and secret
  • Enter the Identifier value in the Client ID and copy the downloaded key value in Client secret of the miniOrange OAuth Client plugin.

  • Apple Application Endpoints and Scope:


    Client ID : Click Here
    Client Secret : Click Here
    Scope: email
    Authorize Endpoint: https://appleid.apple.com/auth/authorize
    Access Token Endpoint: https://appleid.apple.com/auth/token

Step 2: Setup WordPress as OAuth Client

  • Go to the Configure OAuth tab in the Plugin and search for Apple app in the applications list, and select your apple app.
  • apple single sign-on SSO: save settings
  • Now, configure Client ID, Client Secret received from Apple Application and Click on Save Settings to save the configuration.
  • apple single sign-on SSO: save settings

Step 3: User Attribute Mapping.

  • User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.
  • Finding user attributes

    • Go to Configure OAuth tab. Scroll down and click on Test Configuration.
    • apple single sign-on SSO : test congifuration
    • You will see all the values returned by your OAuth Provider to WordPress in a table.
    • apple single sign-on SSO: test congifuration result
    • Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown.
    • apple single sign-on SSO : attribute/role mapping

Step 4: Login Settings / Sign In Settings.

  • The settings in SSO Settings tab define the user experience for Single Sign On. To add a login widget on your WordPress page, you need to follow below steps.
  • Sign In Settings

    • Go to WordPress Left Panel > Appearances > Widgets.
    • Select miniOrange OAuth. Drag and drop to your favourite location and save.
    • apple single sign-on SSO: login button setting
    • Go to your site-URL on private window and you will be able to see Login button with display name you have given.
    • apple single sign-on SSO login button setting
    • You have successfully logged in ,Now you will be able to access your WordPress profile.
    • apple single sign-on SSO: login button setting

Need Help?

Mail us on oauthsupport@xecurify.com for quick guidance(via email/meeting) on your requirement and our team will help you to select the best suitable solution/plan as per your requirement.