Set Up Single Sign-On for WordPress with Entra External ID (Azure AD for Customers)

Customer-facing sites, membership portals, and partner platforms need secure and simple login options. Standard WordPress login forms force users to create separate credentials, which often weakens security, increases support requests, and reduces efficiency.

The All-in-One Microsoft Office 365 Apps Plugin enables WordPress SSO with Microsoft Entra External ID (formerly Azure AD B2C). This identity service lets organizations provide trusted access for external users such as customers, suppliers, or community members.

With this integration, WordPress connects directly to Microsoft Entra External ID so users can sign in with the credentials they already use and trust.

What Happens When Users Log In with Microsoft Entra External ID

When a login request is made, the plugin redirects the user to Microsoft Entra External ID for authentication. Users sign in with an existing identity, such as a Microsoft account, a social login provider configured in Entra, or a custom organizational account.

After authentication, Entra issues a secure token that WordPress validates. The plugin uses this token to create or update the user profile based on configured attributes. Returning users have their credentials verified and are granted access without additional steps.

For membership portals, subscribers access resources using their Entra identity. User details like email and display name sync automatically, while administrators maintain centralized control over access.

Key Benefits

Configuring SSO with Microsoft Entra External ID brings convenience for users and improves efficiency for administrators.

• Customers and partners log in with accounts they already manage through Entra External ID.
• Entra’s security rules, such as MFA or conditional access, are automatically applied.
• User details like email and display name remain consistent through attribute mappings.
• Help desk requests for password resets or login issues are reduced significantly.

Requirements

Before enabling this feature, certain configurations are needed both in WordPress and within Entra External ID.

• Our All-in-One Microsoft Office 365 Apps Plugin must be installed and active.
• Microsoft Entra External ID must have an application registration for WordPress, including a redirect URI.
• The Client ID, Client Secret, and Tenant details from the app registration need to be set inside the plugin.
• Appropriate permissions must be granted to allow SSO and profile data exchange.
• Attribute Mappings must be defined in the plugin to ensure WordPress accounts are provisioned correctly.