Apple OAuth & OpenID connect Single Sign-On (SSO) | Apple SSO Login

Apple OAuth & OpenID connect Single Sign-On (SSO) | Apple SSO Login


WordPress OAuth & OpenID Connect Single Sign-On (SSO) plugin enables secure login into WordPress using Apple as OAuth and OpenID Connect provider. You can also configure plugin using different custom providers and standard IDPs. It supports advanced Single Sign-On (SSO) features such as user profile Attribute mapping, Role mapping, etc. Here we will go through a guide to configure SSO between WordPress and Apple. By the end of this guide, users should be able to login to WordPress from Apple. To know more about other features we provide in WP OAuth Single Sign-On ( OAuth & OpenID Connect Client ) plugin, you can click here.

Pre-requisites : Download And Installation


  • Log into your WordPress instance as an admin.
  • Go to the WordPress Dashboard -> Plugins and click on Add New.
  • Search for a WordPress OAuth Single Sign-On (SSO) plugin and click on Install Now.
  • Once installed click on Activate.



Steps to configure Apple Single Sign-On (SSO) Login into WordPress

1. Setup Apple as OAuth Provider

  • First of all, go to https://developer.apple.com click on Account and Login with your Apple developer account.
  • apple single sign-on SSO Login to apple pple single sign-on SSO create apple account
  • Click on Certificates, Identifiers & Profiles tab.
  • apple single sign-on SSO login Certificates, Identifiers and Profiles
  • In the left menu Click on Identifiers and after that click on the Plus Icon(blue color) . Click on Continue for the next 2 pages.
  • apple single sign-on SSO login user Identifiers
  • Enter Description and Bundle ID for the App ID. (The Bundle ID should be in reverse-dns style string.)
  • apple single sign-on SSO login app Description
  • In the Capabilities section scroll down and select sign with apple and Click on Edit link.
  • apple single sign-on SSO login Capabilities and Enable as a primary App Id
  • Select Enable as a primary App Id and click on Save. Click on Continue and then click on Register.
  • apple single sign-on SSO primary App
  • In the right corner click on Continue and after that Register button.
  • Again click the Plus icon( blue color). Select Service IDs and click on Continue.
  • apple single sign-on SSO app Plusicon
  • Enter Description and Identifier( Identifier would be your client id). and click on the Continue and after that Register button.
  • apple single sign-on SSO login description and clientid
  • Click on Keys tab from the left menu.Click on the Plus icon to register a new key.
  • apple single sign-on SSO app register a new key
  • Give your Key a name, and select Sign In with Apple and click on Configure button.
  • apple single sign-on SSO login key
  • Select your Primary Id and click on the Save button and after that at the right corner click on Continue and Register button.
  • apple single sign-on SSO login app Register
  • Click on the Download button once the key is downloaded click on the Done button.
  • apple single sign-on SSO Download once the key is downloaded
  • In the left menu click on Identifiers and the right top click on App IDs.
  • apple single sign-on SSO select app id
  • Click on Service IDs from the drop down menu.
  •  single sign-on SSO select service IDs is apple AppIDs
  • Select your Service Id from the List.
  • single sign-on SSO select service IDs is apple AppIDs
  • Select Sign In with Apple and click on Configure button.
  • apple single sign-on SSO login app configure
  • Select the Primary App Id from the drop down, and Enter the Domain and Redirect URL in Domains and Subdomains and Return URLs respectively and click on the Next button (You will get the Domain name and Redirect URL from miniOrange plugin).
  • apple single sign-on SSO social login apple redirectURL
  • Verify the details and click on the Done button. After that at the right corner click on the Continue button.
  • Copy the Identifier value and click on the Save button.
  • apple single sign-on SSO app id and secret
  • Enter the Identifier value in the Client ID and copy the downloaded key value in Client secret of the miniOrange OAuth Client plugin.

You have successfully configured Apple as OAuth Provider for achieving Apple login into your WordPress Site.


2. Setup WordPress as OAuth Client

  • Go to the Configure OAuth tab in the Plugin and search for Apple app in the applications list, and select your apple app.
  • apple single sign-on SSO: save settings
  • Now, configure Client ID, Client Secret received from Apple Application.
  • Please refer the below table for configuring the scope & endpoints for Apple in the plugin.

  • Client ID : Click Here
    Client Secret : Click Here
    Scope: email
    Authorize Endpoint: https://appleid.apple.com/auth/authorize
    Access Token Endpoint: https://appleid.apple.com/auth/token
  • Click on Save Settings to save the configuration.
  • apple single sign-on SSO: save settings

You have successfully configured WordPress as OAuth Client for achieving Apple login into your WordPress Site.


3. User Attribute Mapping

  • User Attribute Mapping is mandatory for enabling users to successfully login into WordPress. We will be setting up user profile attributes for WordPress using below settings.
  • Finding user attributes

    • Go to Configure OAuth tab. Scroll down and click on Test Configuration.
    • apple single sign-on SSO : test congifuration
    • You will see all the values returned by your OAuth Provider to WordPress in a table.
    • apple single sign-on SSO: test congifuration result
    • Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, you will get the list of attributes in a Username dropdown.
    • apple single sign-on SSO : attribute/role mapping

4: Role Mapping [Premium]

  • Click on “Test Configuration” and you will get the list of Attribute Names and Attribute Values that are sent by your OAuth provider.
  • From the Test Configuration window, map the Attribute Names in the Attribute Mapping section of the plugin. Refer to the screenshot for more details.
  • Apple Single Sign-On (SSO) - attribute mapping
  • Enable Role Mapping: To enable Role Mapping, you need to map Group Name Attribute. Select the attribute name from the list of attributes which returns the roles from your provider application.
    Eg: Role

  • Apple Single Sign-On (SSO) - test configuration - role mapping
  • Assign WordPress role to the Provider role: Based on your provider application, you can allocate the WordPress role to your provider roles. It can be a student, teacher, administrator or any other depending on your application. Add the provider roles under Group Attribute Value and assign the required WordPress role in front of it under WordPress Role.

    For example, in the below image. Teacher has been assigned the role of Administrator & Student is assigned the role of Subscriber.
  • Apple Single Sign-On (SSO) - test configuration - role mapping
  • Once you save the mapping, the provider role will be assigned the WordPress administrator role after SSO.
    Example: As per the given example, Users with role ‘teacher’ will be added as Administrator in WordPress and ‘student’ will be added as Subscriber.

5: Login Settings / Sign In Settings

  • The settings in Single Sign-On (SSO) Settings tab define the user experience for Single Sign-On (SSO). To add a Apple login widget on your WordPress page, you need to follow the below steps.
  • 1. Sign in settings for wordpress 5.7 and before :

    • Go to WordPress Left Panel > Appearances > Widgets.
    • Select miniOrange OAuth. Drag and drop to your favourite location and save.
    • Apple Single Sign-On (SSO) OAuth/OpenID WordPress create-newclient login button setting

    2. Sign in settings for wordpress 5.8 :

    • Go to WordPress Left Panel > Appearances > Widgets.
    • Select miniOrange OAuth. Drag and drop to your favourite location and save.
    • Apple Single Sign-On (SSO) OAuth/OpenID WordPress create-newclient login button setting
    • Open your WordPress page and you can see the Apple SSO login button there. You can test the Apple Single Sign-On (SSO) now.

In this Guide, you have successfully configured Apple Single Sign-On (SSO) by configuring Apple as OAuth Provider and WordPress as OAuth Client using our WP OAuth Single Sign-On ( OAuth / OpenID Connect Client ) plugin.This solution ensures that you are ready to roll out secure access to your WordPress site using Apple login credentials within minutes.


Additional Resources


Mail us on oauthsupport@xecurify.com for quick guidance(via email/meeting) on your requirement and our team will help you to select the best suitable solution/plan as per your requirement.

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com