WordPress Integration Using All-in-One Microsoft Office 365 Apps Plugin – Step-by-Step Setup for SSO, SharePoint, and More

Plugin Tour

The All-in-One Microsoft Office 365 Apps Plugin dashboard provides a central interface to configure and manage your integrations with Microsoft services like Azure AD, Azure B2C, SharePoint, Power BI, Outlook (Mail), and Dynamics CRM.

Top Navigation Bar:

• Check Premium Plans: Explore available premium features.
• Schedule Free Setup: Book a free setup session with the support team.
• Request for Demo/Trial: Request a product demo or trial.
• Account Setup: Manage your miniOrange/Xecurify account.

Service Tabs:

• Switch between different Microsoft services like Entra ID (Azure AD), Azure AD B2C, SharePoint, Power BI, Mail (Outlook), and Dynamics CRM for specific configurations.

Configuration Tabs:

• Configure Application: Primary setup area for Single Sign-On (SSO) configuration.
• Attribute/Role Mapping: Define how user attributes and roles from Azure are mapped to WordPress.
• SSO Settings: Customize SSO behavior and advanced settings.
• Login Button Customization: Modify how the SSO login button appears on your WordPress site.
• Troubleshoot: Access logs, debug tools, and troubleshooting steps.

Configuration Panel (Example: Entra ID SSO Configurations):

• Display App Name: The label shown on the login button.
• Redirect/Callback URI: The endpoint where Azure AD redirects users after authentication.
• Application (client) ID: Unique identifier for your Azure application.

A Setup Guide button is available for step-by-step instructions.

Support Section (Ask any questions):

• Submit a query directly from the dashboard by entering your email, phone number, and question.
• Option to send your plugin configuration along with the query.
• Toggle to set up a call or screen-share session for more personalized support.

Single Sign-On (SSO) with Azure AD OAuth & OpenID Connect for WordPress

The miniOrange All-in-One Microsoft Office 365 Apps Plugin quickly enables secure Single Sign-On (SSO) for your WordPress site using Microsoft Entra ID (Azure AD). Leveraging the OAuth/OpenID Connect Authorization Code Flow, the plugin ensures that users can log in with their Microsoft 365 accounts, streamlining access and enhancing security.

How the Microsoft Entra ID SSO Works

The plugin connects Microsoft Entra ID with WordPress using OAuth/OpenID Connect, two widely adopted protocols for authentication and authorization that support secure login and delegated access. It redirects users to Microsoft Entra ID for authentication, where they log in with their Entra ID credentials. After a successful login, Microsoft sends a verified ID token back to WordPress to confirm the user’s identity. This process removes the need to store or manage user passwords locally, reducing security risks and simplifying administration.

Key Benefits

Connect WordPress logins to Microsoft Entra ID using OAuth/OpenID Connect SSO to make access easier and more secure.

• Centralize all authentication in Microsoft Entra ID
• Strengthen login security with Microsoft Entra ID credentials and token-based access
• Simplify user lifecycle management and reduce administrative overhead
• Stay aligned with enterprise IAM standards and policies

Before you begin, make sure:

• The miniOrange All-in-One Microsoft Office 365 Apps Plugin plugin is already installed and active. (Refer to the Getting Started – Installation guide for help.)
• You have Global Administrator rights on your Microsoft Entra ID (Azure AD) account.
• You have Administrator access on your WordPress website. Refer - WordPress User Roles
• Your site is SSL-enabled and accessible.

Setup Steps:

• Login with your Azure portal instance and select Microsoft Entra ID (Azure AD).

• Under the Manage section, select App registrations tab and click on the New Registration option.

• Select supported account types as Accounts in any organizational directory (for authenticating users with user flows).
• Select Web in the Select URI section. Enter a callback URL from the All-in-One Microsoft Office 365 Apps plugin (Configure SSO tab) and save it under the Redirect URL textbox.
• Click on the Register button to create your application.

• Here you will get a unique application id for your application which is crucial for your WordPress Microsoft 365 integration configuration.
• The Application ID is your Client ID and Directory ID is your Tenant ID.

• Select Certificates & Secrets option from left navigation panel and click on New client secrets. Enter Description, Expiration Time and click on Add button.

• Copy the value of the Secret Key as it will be required later.

• Microsoft Entra ID (Azure AD) has been successfully configured as the OAuth Provider, enabling seamless Azure AD OAuth Single Sign-On (SSO) and user authorization for your WordPress site.
• Now, we'll setup WordPress as OAuth. Follow the steps below to complete WordPress setup
• Navigate to the Configuration Application tab in the All-in-One plugin. In the Entra ID (previously known as Azure AD) section configure the following details.

• Click on Save Settings.
• Now click on Test Configuration to test the configuration.

You have successfully configured Microsoft Entra ID (Azure AD) as the OAuth Provider, enabling seamless Azure AD OAuth Single Sign-On (SSO) and user authorization for WordPress, ensuring smooth Microsoft 365 integration.

Note: If you face any issues while configuring the Azure application, click the Troubleshoot button or contact us at samlsupport@xecurify.com.

Map between app roles and WordPress roles

This guide walks you through the process of mapping WordPress roles to App Roles defined in your Microsoft Entra ID (Azure AD) application registration. Once configured, Microsoft Entra will include role claims in the user's ID token during login, so correct WordPress role can be automatically assigned based on those claims.

Note: For help with defining App Roles and assigning them to users or groups in Entra ID, refer to this detailed Microsoft documentation.

Before you begin, make sure:

• Install and activate the All-in-One Microsoft Office 365 Apps + Azure/EntraID Login plugin and configure the SSO.
• You have Global Admin rights in Microsoft 365/Entra ID or sufficient privileges to manage app registrations.
• You're an Administrator on your WordPress site.

Setup Steps:

a. Basic Attribute Mapping

• Attribute mapping allows you to map the user attributes sent from the Azure during SSO to the user attribute at the wordpress.
• Navigate to the Attribute/Role Mapping section from the EntraID(AzureAD) tab.
• Enter the required attributes details as well as others from the Test Configuration table and click on Save Settings button.

b. Custom Attribute Mapping

• Custom attribute mapping allows you to map any attribute sent by Azure to the usermeta table of the wordpress.
• Navigate to the Attribute/Role Mapping tab in the plugin.
• Enter Custom Attribute Name and select Attribute Name from Azure from dropdown.
• Click on Save Settings to save the customized data.

c. Basic Role Mapping

This feature enables you to assign and manage user roles during SSO. It supports both default WordPress roles and any custom roles you've defined.

• Scroll down to the Basic Role Mapping section under Attribute Mapping, and add the desired mappers to assign default roles for both new and existing users in the custom and existing user fields dropdown.

d. Custom Role Mapping

• Navigate to the Custom role mapping section from the Attribute/Role Mapping tab.
• Turn on Enable Custom Role Mapping option.
• Enter the Azure groups, separated by semicolons (;), in the provided fields to assign the desired roles and click on Save settings button

Map between Entra ID user properties and WordPress roles

This guide walks you through configuring dynamic role assignment in WordPress based on user information pulled from Microsoft Entra ID (Azure AD). With this setup, you can automate role mapping using user attributes, such as department, job title, or group membership, provided during login or user synchronization.

Role-mapping rules can use various data sources, including:

• Claims in ID tokens (OpenID Connect)
• Attributes in SAML 2.0 responses
• User profile data retrieved via Microsoft Graph
• Properties pushed through SCIM-based provisioning

These rules are triggered when a user signs in via Microsoft or when they’re provisioned to WordPress via Entra ID.

Before you begin, make sure:

• Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps + Azure/EntraID Login plugin must already be configured.
• Optionally, user sync or SCIM-based provisioning is also enabled.
• You have Global Admin privileges in your organization’s Microsoft 365 or Entra ID tenant, or sufficient rights to manage app registrations.
• You are an Administrator on your WordPress site.

Map between Azure AD groups and WordPress roles

This guide explains how to configure dynamic role assignment in WordPress by mapping user roles to their Azure AD group memberships using the All-in-One Microsoft Office 365 Apps + Azure/EntraID Login plugin. When a user logs in through Microsoft Entra ID (Azure AD), miniOrange checks their group affiliations and assigns the appropriate WordPress role automatically, streamlining access control and reducing manual intervention.

Need help deciding between group-based or app role-based role assignment?

Check out this Microsoft comparison guide for a breakdown of the differences between Azure AD groups and app roles.

Before you begin, make sure:

• Single Sign-On (SSO) is already set up using the All-in-One Microsoft Office 365 Apps + Azure/EntraID Login plugin.
• The plugin’s integration settings are already configured.
• You have Global Administrator access in your Microsoft 365 tenant or Entra ID (Azure AD) or the rights to manage app registrations.
• You are an Administrator on your WordPress website.

Restrict access to members of specific Azure AD groups

This guide explains how to integrate WordPress’s built-in scheduling system, WP-Cron, with an external task scheduler to ensure consistent and reliable execution of miniOrange’s Azure AD to WordPress user synchronization feature.

WP-Cron can sometimes be unreliable on its own, especially if your site doesn’t receive regular traffic. By linking it to a more dependable task runner (like a server-side cron job or external service), you can ensure scheduled sync operations run smoothly, without depending on random page visits.

Before you begin, make sure:

• Your goal is to enable automated user synchronization from Azure AD to WordPress.
• Ensure the All-in-One Microsoft Office 365 Apps Plugin plugin is installed and activated.
• You have already followed this guide and successfully configured the sync feature.
• You have Admin access to your WordPress site and permission to modify server files (via FTP or file manager).
• You’ve added wp-cron.php to the list of pages excluded from authentication on the plugin’s SSO configuration screen.

Place a Microsoft Sign-In Button Anywhere Using a Shortcode

Want to let users log in with their Microsoft account from any part of your WordPress site—whether it's a post, page, or even the site header? This guide shows you how to use a shortcode to insert a "Login with " button wherever you need it.

Before you begin, make sure:

• Single Sign-On (SSO) with Microsoft is already set up using the appropriate plugin.
• You have at least Author-level access on your WordPress site.

Enable Microsoft SSO: Add a “Sign in with Microsoft” Button to Your WordPress Login

Allow users to log in using their Microsoft credentials by integrating a “Sign in with Microsoft” button into your WordPress login page. This not only improves login efficiency but also enhances your site’s security through Microsoft’s trusted authentication platform.

Why Use This Option?

• Frictionless Login: Eliminate the need for users to remember separate credentials by leveraging their Microsoft identity.
• Enterprise-Grade Security: Utilize OAuth 2.0 and OpenID Connect standards to authenticate users securely.
• Better User Experience: Ideal for organizations using Microsoft 365—users can log in with a single click.
• Reduced Support Load: Fewer password reset requests and improved user experience.

Before you begin, make sure:

• You have a Microsoft Entra ID (formerly Azure AD) tenant.
• You’ve registered a web application in the Microsoft Entra ID portal.
• Client ID and Client Secret are available from your Microsoft app registration.
• Our plugin is installed and activated on your WordPress site.
• You have administrative access to both your WordPress site and the Microsoft Entra ID portal.

How the Integration Works?

• The login page displays a Sign in with Microsoft button.
• When clicked, the user is redirected to Microsoft for authentication.
• Once verified, the user is redirected back and logged into WordPress.
• If configured, the user’s WordPress role can be mapped based on their Microsoft attributes.

Common Use Cases

• Internal Portals for employees using Microsoft 365.
• Education Platforms where students log in with institutional accounts.
• Customer Portals with Microsoft account-based access.

Set Up Single Sign-On for WordPress with Entra External ID (Azure AD for Customers)

This guide walks you through configuring Single Sign-On (SSO) for your WordPress site using Microsoft Entra External ID, Microsoft's latest customer identity and access management (CIAM) platform. Designed to replace traditional Azure AD B2C implementations, Entra External ID provides a modern and scalable solution for managing customer-facing authentication across web applications, including WordPress.

Although still in preview, Entra External ID is production-ready and already supported by the All-in-One Microsoft Office 365 Apps Plugin for secure login and user synchronization.

Why Choose Entra External ID?

Before committing to an Azure AD B2C implementation, it’s worth evaluating Entra External ID’s new capabilities. It offers a forward-looking approach to CIAM with features that overlap and improve upon Azure AD B2C. Make sure to review Microsoft’s official documentation to determine the best fit for your use case.

Before you begin, make sure:

• Ensure the All-in-One Microsoft Office 365 Apps Plugin plugin is installed and activated. (See Getting Started – Installation.)
• You have Global Administrator access in your Entra ID tenant or have the necessary approvals in place.
• You’re an Administrator on your WordPress site.
• Your website is secured with an SSL certificate and accessible via https://.

Enable WordPress SSO with Azure AD B2B Collaboration

This guide walks you through enabling Single Sign-On (SSO) for your WordPress site using Azure Active Directory (Azure AD) B2B, allowing secure access for external or guest users from other organizations.

With Azure AD B2B, you can extend access to your WordPress website and other enterprise applications to partners, vendors, or collaborators, while keeping full control over user access and data sharing. It supports both invitation-based onboarding and self-service sign-up, giving you flexibility in how guest users are added to your environment.

How Does It Work?

When configured using the All-in-One Microsoft Office 365 Apps Plugin, Azure AD B2B allows you to:

• Manually invite guest users to your tenant, giving them access to your WordPress site.
• Or, enable self-service registration, letting users sign up on their own using defined user flows. (Refer to Microsoft’s guide on self-service sign-up to understand this process.)

This guide assumes you're opting for the self-service model, where users initiate their own registration and login journey.

Before you begin, make sure:

• Ensure the All-in-One Microsoft Office 365 Apps Plugin plugin is installed and activated.
• You have Global Administrator privileges in your organization’s Microsoft 365/Azure AD tenant or appropriate permissions.
• You are a WordPress Administrator.
• Your site uses SSL and is accessible via https://.

Configure Single Sign-Out for Microsoft SSO in WordPress

This guide explains how to enable Single Sign-Out for your WordPress site when users authenticate via Microsoft Entra ID (Azure AD). With this feature, signing out of Microsoft automatically logs users out of all connected Azure AD applications, including your WordPress site, offering a seamless and secure session termination experience across services.

Before you begin, make sure:

• You’ve successfully configured Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin plugin.
• You have the necessary permissions to edit the Azure AD App Registration associated with your WordPress site.

Connect WordPress with Microsoft Apps (Azure AD, Azure B2C, SharePoint, Power BI, Dynamic CRM, Graph etc.)

This guide will help you enable token-based communication between your WordPress site and Microsoft APIs using the All-in-One Microsoft Office 365 Apps Plugin.

Overview

To establish this connection, your WordPress site must be authorized to:

• Request data on behalf of a logged-in user (delegated access), or
• Operate independently of user sessions (application access).

Prerequisites

• Ensure you have Global Administrator rights or permission to manage Azure AD App Registrations.
• Confirm you have Admin access to your WordPress website.

Follow these five steps to complete the integration:

• Register your site as an application in Azure AD.
• Allow token generation, enabling the site to access Microsoft APIs.
• Assign API permissions to define the scope of access.
• Generate a client secret, which serves as a secure credential for authentication.
• Configure the plugin with the necessary Azure AD details to complete the setup.

Configuring SharePoint:

a. Automatic Connection for Sharepoint

• In Configure Folders/Files tab, under the Automatic Connection section click on connect button to connect SharePoint automatically.
• You can also navigate to the Embed SharePoint Library section and copy the provided shortcode. Simply paste this shortcode on any page to display your SharePoint folders or files

b. Manual Connection for Sharepoint

• Log in to Azure AD Portal, as an Administrator.
• You will be represented with the home screen of Azure Active Directory.
• Under the Azure Services section, select Microsoft Entra ID.

• Under the Manage section, select App registrations tab and click on the New Registration option.

• Write the App Name in the name field and choose the account type. By default account type is selected as Account in this Organizational Directory only.
• Redirect URI is optional, you can keep this field empty.
• Once you have provided the above data you can click on Register button.

• After the registration of an application, Azure AD assigns an unique application ID to your application.
• Navigate to the Overview tab, in the left pane.
• Copy the Application ID and the Directory ID, as this will be used as your Client ID and Tenant ID for configuring the SharePoint Plugin.
• Therefore, you can keep it handy somewhere like notepad to later use it.

• From the left navigation pane, navigate to the Certificates & secrets tab.
• Click on New client secret to enter the description and expiration time, then click on the Add option.

• Copy the Secret Value as shown in the below screenshot. Once you navigate to any other page this value will be hidden so copy and paste it somewhere handy.

NOTE: Make sure you have copied the value of client secret and not the Secret ID as shown in the below image.

• Please provide values mentioned in the table above to your WordPress developer to configure the plugin.

Granting API Permissions to your Azure AD Application:

• Go to API Permissions from the left navigation pane and click on Add a permission option.

• Select Microsoft Graph from the list.

• Select Application permissions (2nd option) as type of permissions.

Note: You can choose between two different permissions Sites.Read.All and Sites.ReadWrite.All under the sites option to suit your access needs.

• To allow user to only Read the Sites data please select Sites.Read.All permission and click on the Add Permissions button.

• Or to enable uploading / Editing of files from WordPress to SharePoint you need to grant permission to Sites.ReadWrite.All and then click on the Add Permissions button.

NOTE: In the paid version of the plugin, you can assign the Sites.Selected to restrict user permissions. Click here to learn how this helps with granting permissions.

• Click on Grant admin consent for button and then click on Yes from Grant admin consent confirmation window.

• You can verify the granted status as shown in the image below.

Configure Embed SharePoint OneDrive Documents Plugin

Note: Before you configure the SharePoint Plugin with Manual-configuration, you would need to configure your Azure AD app first. This will allow you to get all the required endpoints for configuring the plugin.

• Navigate to the Embed SharePoint OneDrive Documents Plugin.
• Under the Connection tab, scroll down to the Manual Configuration section, then provide the required information from the Azure AD App, and click on the Save button.

• After successfully saving the configuration click on the Test Configuration button to test your connection with the Azure AD.

• If your SharePoint setup is successful, then you should see a similar window as shown in the image below.

• In Configure Folders/Files tab under the Manual section click on Use Configure Entra App connection button.
• Navigate to API Permissions in your Azure AD Application.
• Click Add a permission, then choose Microsoft Graph.
• Click on Application Permission
• And Scroll down and find out Sites dropdown from the List of the Application Permission.
• Select the option Sites.Read.All permission from the list of the available permissions.
• Click on the Add Permission button.

Grant App-Only Permissions for Microsoft 365 Integration

This guide explains how to assign app-only (application) permissions to the All-in-One Microsoft Office 365 Apps Plugin for WordPress, enabling it to securely access Microsoft 365 services, such as Microsoft Graph, SharePoint, or OneDrive, without requiring a logged-in user session.

Why Use App-Only Permissions?

App-only permissions authorize the plugin itself to interact with Microsoft services using OAuth 2.0, bypassing the need for user credentials. This configuration is especially useful when:

• You want to integrate Microsoft Graph to pull user profile attributes, avatars (for WordPress or BuddyPress), or group membership data.
• You plan to sync users from Azure AD to WordPress dynamically, and prefer assigning broad access (like User.Read.All, Group.Read.All) to the plugin instead of each user individually.
• You want to schedule background user synchronization tasks between Azure AD and WordPress.
• You're setting up SCIM-based provisioning from Azure AD, which also requires application-level access. (See documentation: WordPress SCIM User Provisioning)

Important Notes Before Proceeding

• Configuring app-only permissions involves creating a dedicated App Registration in Azure AD.
• If you're using OpenID Connect SSO (default), this new registration will be your second app, your first handling delegated permissions for SSO.
• If you're using SAML 2.0 SSO, this will likely be your first and only App Registration.

Note: Refer to Microsoft's official documentation to better understand the difference between delegated and application permissions (and how consent works).

Before you begin, make sure:

• Single Sign-On (SSO) is already configured for your WordPress–Microsoft 365 integration.
• You have Global Administrator rights in Azure AD or at least the ability to manage the necessary App Registrations.
• You have Admin access to your WordPress site.

Configure WordPress Email Delivery via Microsoft Graph

Looking to send WordPress emails directly through Microsoft 365 without using traditional SMTP? This guide will show you how to configure secure email delivery using the Microsoft Graph API.

Before you begin, make sure:

• Disable other email-sending plugins (e.g., WP Mail SMTP or Outlook integrations) to prevent conflicts.
• You have Global Admin rights in Microsoft 365 or permissions to create and manage Azure AD App registrations.
• You have Administrator access to your WordPress site.
• If you've already registered an Azure AD app for SSO or user sync, you can reuse it and skip the initial setup steps.

Important Note for New Microsoft 365 Tenants

If your Microsoft 365 subscription is less than 90 days old or currently in trial mode, Exchange Online may block emails sent outside your organization due to low sender reputation. While the plugin might report a successful send, those messages may not be delivered externally.

To resolve this, contact Microsoft Support through your admin portal: https://admin.microsoft.com → Show All → Support → Help & Support

Setup Steps:

a. Configuration for the plugin

• In Configure Mail tab click on Use configured Entra ID App

• In the Configure Microsoft Graph Mail section, enter the User Principal Name (UPN) of the account you want to use to send emails.

Note: This user must have a valid Microsoft 365 Outlook Email Exchange license.

• Now, configure the Save Emails to Sent Items and Send Welcome Email to New Users toggles according to your preferences.
• Then, click on Save Settings

b. Configuration for the Entra ID App

• Go to API permissions from the left navigation pane and click on Add a permission option.
• Now select Graph in the Microsoft APIs tab.

• Select Application permissions and search for the mail.

• Under the mail section select for Mail.Send and click on Add permissions button.
• Navigate to the Send Mail tab and locate the Send Custom Email section.
• Enter the recipient's Email ID in the To field.
• Customize the email by updating the Subject and Content fields as needed.
• Click Save Settings to apply your changes, then click Send Email to send the custom email.

Sync WordPress Users with Azure AD B2C and Entra External ID

This guide outlines how to create and update user accounts in Azure AD B2C or Microsoft Entra External ID (formerly known as Azure AD for Customers) directly from your WordPress site using the All-in-One Microsoft Office 365 Apps Plugin.

Note: This functionality is limited to customer identity directories—standard Azure AD (workforce) tenants are not supported for user creation or updates.

What Are Azure AD B2C and Entra External ID?

• Azure AD B2C is Microsoft’s identity platform designed for customer-facing applications. It allows users to sign in with social accounts, enterprise credentials, or local accounts while providing full control over authentication flows, branding, and user experience. Learn more about Azure AD B2C
• Microsoft Entra External ID is the next evolution of customer identity and access management. Although still in preview, it offers robust features for CIAM and is already supported by our All-in-One Microsoft Office 365 Apps Plugin, including single sign-on (SSO) and user provisioning capabilities.

Why Integrate WordPress with Azure for Customer Identity?

When you enable Microsoft login through the All-in-One Microsoft plugin, you’ll likely want to automatically provision new users or update existing ones in your Azure AD B2C or Entra External ID directory. This setup offers:

• Centralized user management with custom attributes, branded login pages, and secure password policies.
• No need for WordPress user registration or passwords. Users authenticate via Microsoft, and miniOrange handles user creation behind the scenes.
• Protection against brute-force attacks by optionally forcing all login attempts to go through Azure.
• Streamlined experience where users sign in via Microsoft and are seamlessly redirected back to WordPress.

Before you begin, make sure:

• You’ve installed and activated the All-in-One Microsoft Office 365 Apps Plugin plugin (see Getting Started).
• Azure AD B2C SSO is set up and functional.
• You have Global Administrator rights in Microsoft 365 or approval from someone with these rights.
• You have Admin access to your WordPress website.
• Your website is secured with SSL (https://).

Set Up SCIM-Based User Provisioning from Microsoft Entra ID to WordPress

This guide explains how to enable automated user provisioning from Microsoft Entra ID (formerly Azure AD) to your WordPress site using the SCIM (System for Cross-Domain Identity Management) protocol.

In this setup, Microsoft Entra acts as the identity provider, while your WordPress instance functions as the service provider that consumes identity data. miniOrange enables this integration by offering a custom SCIM endpoint, which securely receives user data, such as account creation, updates, and deactivations, pushed from Entra ID. WordPress user profiles are then updated accordingly in real time.

Note: SCIM provisioning supports users only, not groups, in the current implementation.

Before you begin, make sure:

• Your Microsoft Entra plan supports automatic user provisioning to third-party (non-gallery) applications. Refer to Microsoft’s Entra Licensing Guide for eligibility.
• You have Global Administrator rights in your Entra tenant and the ability to register enterprise applications.
• You have Administrator access to your WordPress website and permission to modify the wp-config.php file.

Synchronize users from Azure AD to WordPress

Managing user accounts manually can be time-consuming and error-prone, especially in dynamic environments. This guide explains how to automate the creation, update, and deactivation of WordPress users by syncing them directly from Microsoft Entra ID (formerly Azure AD) using the All-in-One Microsoft Office 365 Apps plugin suite.

What Can You Automate with Azure AD Sync?

With user sync enabled, miniOrange can streamline a variety of identity management tasks:

• Provisioning: Automatically create WordPress accounts for new users as they’re onboarded in Entra ID.
• Profile Updates: Keep WordPress user profiles in sync with changes made in Microsoft 365 (e.g., phone number, job title).
• Deactivation: Remove or disable accounts in WordPress when a user is offboarded or unassigned.

You can also enhance the sync with additional features:

• Role Mapping: Assign WordPress roles based on Azure AD group memberships.
• Custom Field Mapping: Sync extended user attributes such as mobile number, department, or employee ID.
• Profile Photos: Automatically update WordPress avatars using Microsoft 365 profile pictures.

Before you begin, make sure:

• Install and activate the All-in-One Microsoft Office 365 Apps Plugin plugin.
• You have Global Admin access in your Microsoft 365 or Entra ID tenant or permission to manage Azure AD App registrations.
• You’re an Administrator on your WordPress site.
• Single Sign-On (SSO) is already configured.
• You’ve completed the integration setup as outlined in the respective guide.

Synchronize users from WordPress to Azure AD B2C / Entra External ID

This guide covers how to export and synchronize user data from your WordPress site into Azure AD B2C or Microsoft Entra External ID (formerly Azure AD for Customers) using the WPO365 plugin.

Note: Synchronization to standard Azure AD (workforce) tenants is not supported.

What Are Azure AD B2C and Entra External ID?

• Azrue AD B2C is a customer identity platform that allows end users to sign in using social, enterprise, or local accounts, offering a seamless experience across apps and services. Learn more about Azure AD B2C
• Microsoft Entra External ID is Microsoft’s next-generation CIAM solution. Though still in preview, it brings modern identity management capabilities for customer-facing apps and is already supported by our All-in-One Microsoft Office 365 Apps Plugin, for both SSO and user provisioning.

Before you begin, make sure:

• Install and activate the All-in-One Microsoft Office 365 Apps Plugin plugin.
• Set up Single Sign-On with either Azure AD B2C or Entra External ID.
• Ensure you have Global Admin access in your Microsoft 365 or Azure AD B2C tenant, or have obtained approval.
• You are a WordPress Administrator.
• Your site is running on HTTPS with a valid SSL certificate.

Connect WP-Cron to a Reliable Task Scheduler for Azure AD Sync

This guide explains how to restrict access to your WordPress site so that only users who belong to certain Azure AD groups, such as security groups, Microsoft 365 groups, or distribution lists, can log in.

This setup allows you to enforce group-based access policies for internal portals, intranet sites, or membership-only content, ensuring that only authorized users from your organization can gain access.

Before you begin, make sure:

• You’ve successfully configured Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin plugin.
• You have Global Administrator access to your Azure AD tenant or sufficient rights to modify App registrations.
• You’re an Administrator on your WordPress site.
• You’ve added wp-cron.php to the list of pages excluded from authentication on the plugin’s SSO configuration screen.

Set Microsoft 365 profile picture as WP avatar

This guide explains how to automatically update a user’s avatar in WordPress using their profile picture from Microsoft 365 / Azure AD. Once enabled, the profile image associated with a user’s Microsoft account is fetched and displayed on their WordPress profile, enhancing personalization and consistency across platforms.

Before you begin, make sure:

• Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin plugin is already configured.
• The plugin’s integration features are properly set up.
• You have Global Admin access to your Azure AD tenant or the necessary rights to update the App Registration.
• You are a WordPress Administrator.

Send email using Microsoft Graph with application-level permissions

This guide explains how to set up the All-in-One Microsoft Office 365 Apps Plugin to send emails from your WordPress site using Microsoft Graph API with application-level permissions—an alternative to the more common delegated access setup.

Before you begin, make sure:

• You are a Global Administrator in your Microsoft 365 tenant or have permissions to create and modify Azure AD App registrations.
• You have Admin access to your WordPress site.
• If an App Registration already exists (e.g., for SSO or user sync), you can reuse it and skip the initial app creation step.

Customize WordPress Login Experience with Dual Login

This guide explains how to configure a dual login setup for your WordPress site using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin, allowing you to offer both Microsoft-based and traditional WordPress login options on the same site.

This setup is ideal for websites where some users sign in with Microsoft (via Entra ID/Azure AD) while others, such as admins, editors, or legacy users, still need access through the default WordPress login form.

Before you begin, make sure:

• Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin is already configured.
• The plugin’s integration features are properly set up.
• You have Global Admin access to your Azure AD tenant or the necessary rights to update the App Registration.
• You are a WordPress Administrator.

Embed Power BI Reports and Dashboards in WordPress

This guide will help you integrate Microsoft Power BI visualizations—such as reports, dashboards, or individual tiles—directly into your WordPress pages or posts using the All-in-One Microsoft Office 365 Apps Plugin.

This setup is ideal for websites where some users sign in with Microsoft (via Entra ID/Azure AD) while others, such as admins, editors, or legacy users, still need access through the default WordPress login form.

Before you begin, make sure:

• Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin is already configured.
• The plugin’s integration features are properly set up.
• You have Global Administrator access in your Microsoft 365 / Entra ID tenant or sufficient rights to update Azure AD App Registrations.
• You are a WordPress Administrator.

Display a Microsoft 365 Employee Directory in WordPress

This guide walks you through embedding the miniOrange Employee Directory—powered by Microsoft Graph—into any WordPress page. The directory allows users to look up colleagues, teams, or departments based on data stored in Azure Active Directory.

Before you begin, make sure:

• Ensure SSO is configured via the All-in-One Microsoft Office 365 Apps Plugin (unless using application-level permissions).
• The plugin’s integration capabilities must also be properly set up.
• You have Global Administrator rights in your Microsoft 365 / Azure AD tenant or permission to manage the associated App Registration.
• You are a WordPress Administrator.

Embed SharePoint or OneDrive Libraries in WordPress

Looking to display documents from SharePoint Online or OneDrive directly within your WordPress site? This guide explains how to embed entire document libraries or folders into a WordPress page or post using the miniOrange’s All-in-One plugin, integration.

Before you begin, make sure:

• You’ve already set up Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin plugin (unless you're using application-level permissions to allow access without Microsoft login).
• The plugin’s integration features are fully configured.
• You have Global Admin rights in your Microsoft 365 tenant or sufficient privileges to manage Azure AD App Registrations.
• You are an Administrator on your WordPress site.

SharePoint Search for WordPress

This guide explains how to embed a SharePoint Online-powered search experience directly into a WordPress page or post, ideal for organizations using WordPress as an intranet or internal collaboration hub.

With the Content by Search app, users can search across SharePoint-hosted content, including documents, tasks, and employee profiles, without leaving their WordPress environment. The basic search feature is included with the All-in-One Microsoft Office 365 Apps Plugin.

Before you begin, make sure:

• You’ve already configured Single Sign-On (SSO) using the miniOrange's All-in-One Microsoft Office 365 Apps Plugin plugin.
• The plugin’s integration features are active and working.
• You have Global Administrator privileges in your Microsoft 365 tenant or permission to manage Azure AD App registrations.
• You are an Administrator on your WordPress site.