Salesforce Single Sign-On (SSO) With WordPress as OAuth Server | Salesforce SSO

Overview

WordPress OAuth Server plugin enables Single Sign-On (SSO) into the Salesforce app using your WordPress username and password. Once you configure the Salesforce with WP OAuth Server plugin, you can login to your Salesforce application using WP credentials. OAuth Server plugin also allows you to send custom WordPress user attributes to your Salesforce app as per your requirements. To know more about other features we provide in WP OAuth Server plugin, you can click here.

Pre-requisites : Download And Installation

• Log into your WordPress instance as an admin.
• Go to the WordPress Dashboard >> Plugins and click on Add New.
• Search for a WordPress OAuth Server Single Sign-On (SSO) plugin and click on Install Now.
• Once installed click on Activate.

Configuration Steps

Step 1. Setup WordPress as OAuth Server

• Go to miniOrange OAuth Server on the left side menu and click on Custom OAuth 2.0 Client button.

• Enter Client name as you want. Enter the Redirect / Callback URL ( eg: https://<salesforce-domain>/services/authcallback/<url-suffix>) provided by Salesforce under the Redirect URI field and click on Save Client button.

• Note down Client ID, Client Secret, Endpoints and Scope to configure in your Salesforce app.

Step 2. Configure Salesforce as OAuth Client

• Login to your SalesForce account.
• Switch to the SalesForce Classic mode from the profile menu, and then go to the Setup page.

• In the Quick Find box, enter Auth, and then select Auth. Providers.

• Click on the New button and Select Provider type as OpenID Connect from dropdown.

• Enter the provider Name, URL suffix, Client ID as Consumer Key, Client secret as Consumer Secret, Scope, Endpoints which you have copied from miniOrange OAuth Server plugin.
• Create the Registration Handler by clicking on Automatically create a registration handler template link. Also select the user in Execute Registration as field. You can choose the admin user and click on Save button to save your configuration.

Client ID :	Click Here
Client Secret :	Click Here
Scope:	profile openid
Authorize Endpoint:	https://< your-wordpress-domain >/wp-json/moserver/authorize
Access Token Endpoint:	https://< your-wordpress-domain >/wp-json/moserver/token
Get User Info Endpoint:	https://< your-wordpress-domain >/wp-json/moserver/resource

• Now, You can see the Test-Only Initialization URL. It redirects you to your OpenID provider and asks you to sign in. You’re then asked to authorize your app. After you authorize, you’re redirected to Salesforce. You should see the user XML element with email element inside it.

Step 3. Add SSO button

• In the Quick Find box, enter My Domain, and then select My Domain.

• Scroll down to find the Authentication Configuration section, click on Edit.

• From Authentication Service, select the checkbox for you Auth Provider and Save the settings.

• You can open your Salesforce login page in an incognito window, you should see the SSO button added.

In this Guide, you have successfully configured WordPress Single Sign-On (SSO) into Salesforce app with WordPress as OAuth Provider and Salesforce as OAuth Client using our WP OAuth Server plugin. This solution ensures that you are ready to roll out secure access to your Salesforce app using WordPress site credentials within minutes.

Related Articles

• Salesforce Administration Guide
• WordPress OAuth Server Single sign-on (SSO)
• Step Guide to enable miniOrange OAuth Server for WordPress
• WordPress OAuth Server Plugin