Search Results :

×
Sign Up Contact Us

Contents

Microsoft Teams SSO (Single Sign-On) WordPress OAuth | Microsoft Teams SSO

Configure Teams SSO (Single Sign-On) with WordPress OAuth & OpenID Connect Single Sign-On (SSO) plugin. Microsoft Teams SSO with WordPress allows your users to login to your WordPress and access the site by authenticating with their Microsoft Teams identity provider. You can also configure plugin using different IDPs such as Azure B2C, Office 365, and other custom providers. It supports advanced Single Sign-On (SSO) features such as user profile Attribute mapping, Role mapping, multi tenant login etc. Here we will go through a guide to configure SSO between WordPress and Microsoft Teams for user authentication. By the end of this guide, users should be able to perform secure login to WordPress and access the site with Microsoft Teams SSO. To know more about other features we provide in WP OAuth Single Sign-On ( OAuth & OpenID Connect Client ) plugin, you can click here. To know more details about different features provided in Azure AD SSO and Microsoft Office 365 SSO, please click here.

download plugin button Download Plugin plugin pricing button plugin pricing button Pricing Plans free trial plugin free trial plugin Free Trial

  • Log into your WordPress instance as an admin.
  • Go to the WordPress Dashboard -> Plugins and click on Add New.
  • Search for a WordPress OAuth Single Sign-On (SSO) plugin and click on Install Now.
  • Once installed click on Activate.

  • Sign in to Azure portal.
  • Select Azure Active Directory.
    • Azure AD Single Sign-on (SSO) - Login
  • In the left-hand navigation pane, click the App registrations service, and click New registration.
    • Azure AD Single Sign-on (SSO) - App-Registration
  • Configure the following options to create a new application.
    • Enter a name for your application under the Name text field.
    • In supported account types, select 3rd option ‘Accounts in any organizational directory (for authenticating user with user flows).
    • In the Redirect URI section, select the Web application and enter the Callback URL from the miniOrange OAuth Client plugin (Configure OAuth tab) and save it under the Redirect URL textbox.
  • Make sure the "Grant admin consent to openid and offline_access permissions" option is enabled. When finished, click Register.
    • Azure AD Single Sign-on (SSO) - Overview
  • Azure AD assigns a unique Application ID to your application. The Application ID is your Client ID and the Directory ID is your Tenant ID, keep these values handy as you will need them to configure the miniOrange OAuth Client plugin.
    • Azure AD Single Sign-on (SSO) - Overview
  • Go to Certificates and Secrets from the left navigaton pane and click on New Client Secret. Enter description and expiration time and click on ADD option.
    • Azure AD Single Sign-on (SSO) - secret-Key
  • Copy the secret key "value" and keep the value handy it will be required later to configure Client Secret under the miniOrange OAuth Client Plugin.
    • Azure AD Single Sign-on (SSO) - Secret-Key-2

    In conclusion, by successfully configuring Microsoft Teams as OAuth Provider, you have enabled seamless Microsoft Teams Single Sign-On (SSO) and authorization for your end users into WordPress.


  • Go to Configure OAuth tab and click Add New Application to add a new client application into your website.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Add new application
  • Choose your Application from the list of OAuth / OpenID Connect Providers, Here Microsoft Teams.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Select Application
  • After selecting the provider copy the Callback URL which needs to be configured in OAuth Provider's SSO application Configuration.
  • Enter the Client Credentials like Client ID & Client Secret which you will get from the Microsoft Teams SSO application.
  • Configure the Endpoints for the Microsoft Teams SSO application. Please refer the below table for configuring the scope & endpoints for Microsoft Teams in the plugin
    • Scopes: openid
    Authorize Endpoint: https://login.microsoftonline.com/<tenant-id>/oauth2/authorize
    Access Token Endpoint: https://login.microsoftonline.com/<tenant-id>/oauth2/token
    Get User Info Endpoint: https://login.windows.net/common/openid/userinfo
  • Click on Next.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Client ID & Client Secret
  • After verifying all the details on the summary page, click on Finish to save the configuration as well as test the SSO connection.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Finish configuration

    In conclusion, by successfully configuring WordPress as OAuth Client, you have enabled seamless Microsoft Teams Single Sign-On (SSO) and authorization for your end users into WordPress.

  • Go to Configure OAuth tab and search your application name to add a new client application into your website, Here Custom OpenID Connect App.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Add new application

  • Please refer the below table for configuring the scope & endpoints for Microsoft Teams in the plugin.

    Scopes: openid
    Authorize Endpoint: https://login.microsoftonline.com/<tenant-id>/oauth2/authorize
    Access Token Endpoint: https://login.microsoftonline.com/<tenant-id>/oauth2/token
    Get User Info Endpoint: https://login.windows.net/common/openid/userinfo
    • Microsoft Teams Single Sign-On (SSO) OAuth - Add App name, TenantID
  • Choose your Grant Type from the list of options & Click on Save Settings to save the configuration.
    • Microsoft Teams Single Sign-On (SSO) OAuth - Add Grant Type

    You have successfully configured WordPress as OAuth Client for achieving user authentication with Microsoft Teams Single Sign-On (SSO) login into your WordPress Site.

  • User Attribute Mapping is mandatory for enabling users to successfully Single Sign-On into WordPress using Microsoft Teams SSO. We will be setting up user profile attributes for WordPress using the below settings.

    • Finding user attributes

    • Once you see all the values in Test Configuration, go to Attribute / Role Mapping tab, map an attribute with a username that is unique for every user. You also map other attributes like firstname, lastname, etc. Click on Save.
      • Microsoft Teams Single Sign-On (SSO) - attribute/role mapping


  • The settings in Single Sign-On (SSO) Settings tab define the user experience for Single Sign-On (SSO). To add a Microsoft Teams login widget on your WordPress page, you need to follow the below steps.
  • Go to WordPress Left Panel > Appearances > Widgets.
  • Select miniOrange OAuth. Drag and drop to your favourite location and save.
    • Microsoft Teams Single Sign-on (SSO) - WordPress create-newclient login button setting
  • Go to WordPress Left Panel > Appearances > Widgets.
  • Select miniOrange OAuth. Drag and drop to your favourite location and save.
    • Microsoft Teams Single Sign-on (SSO) - WordPress create-newclient login button setting
  • Open your WordPress page and you can see the Azure AD SSO login button there. You can test the Azure AD Single Sign-On (SSO) - Azure AD OAuth now.
  • Make sure the "Show on login page" option is enabled for your application. (Refer to the below image)
    • Microsoft Teams Single Sign-on (SSO) - WordPress create-newclient login button setting
  • Now, go to your WordPress Login page. (Eg. https://< your-wordpress-domain >/wp-login.php)
  • You will see an Microsoft Teams SSO login button there. Once you click the login button, you will be able to test the Microsoft Teams Single Sign-On (SSO).
    • Microsoft Teams Single Sign-on (SSO) - WordPress create-newclient login button setting

In conclusion, after successfully configuring Microsoft Teams as an OAuth Provider and WordPress as an OAuth Client, you've achieved a smooth and secure authentication process for your users. Through Microsoft Teams Single Sign-On (SSO), you can ensure a robust user experience within the WordPress environment. This allows users the ease of accessing multiple applications with a single set of login credentials. Through the integration of Microsoft Teams OAuth as the primary authentication solution, users can securely log into their WordPress accounts with their existing Microsoft Teams credentials.



Yes. You can restrict access to specific WordPress pages or posts based on Microsoft Teams membership. This is ideal for internal portals, training content, or department-specific pages. Users must be logged in via Microsoft 365, and their Teams group membership is verified before granting access.

It simplifies role-based access without managing WordPress roles manually. Content is protected and only visible to the right team members. It’s secure, scalable, and works well for intranets, HR portals, and learning systems powered by WordPress.



ADFS_sso ×
Hello there!

Need Help? We are right here!

support