Configure Wild Apricot Single Sign-On (SSO) with Joomla OAuth Client Plugin

Overview

This guide will walk you through connecting your Joomla website with your Wild Apricot account using our Joomla OAuth Client extension. This integration is specifically designed for clubs, associations, and non-profits that use Wild Apricot for membership management and want to provide a seamless login experience on a separate Joomla site.

The key advantage of this setup is the ability to offer Single Sign-On (SSO) to your members and, more importantly, to create members-only content on your Joomla site. You can restrict access based on a user's active membership status or even their specific membership level (e.g., "Gold," "Student," "Board Member") as defined in your Wild Apricot database.

Configuration Steps

This guide will walk you through configuring our Joomla OAuth Client extension to connect with miniOrange as your Identity Provider (IdP). This setup enables secure Single Sign-On (SSO), allowing your users to log into your Joomla site using their existing Wild Apricot credentials.

This integration is designed for organizations that use Wild Apricot as their central identity and access management solution.

Step 2: Configure Wild Apricot as OAuth Server

• Log in to your Wild Apricot Admin panel and create a new app.
• Click on the Apps tab in the left panel.

• In the Apps tab, navigate to the Integrations section and click on the Authorized Applications card/box, as seen in the illustration below.

• As indicated in the image below, click the Authorize application button.

• Select Server application from the list of options under Application authorization and then click Continue.

• Enter the application name into Application name textfield and click on the Generate client secret button.

• Copy the Client ID and Client Secret. Keep it handy. It will require to configure drupal as OAuth client.

• Scrolldown and check the Authorize users via Wild Apricot single sign-on service.
• Paste the previously copied Callback/Redirect URL into the Trusted redirect domains textfield.

• Now, navigate to Accounts from the left side menu. Under the Dashboard copy the Your website. It will be your_account_url for Authorize Endpoints.

• Navigate to Account details and copy the Account number from the General section. It will be account_id for Get User Info Endpoints.

Step 3: Configure Joomla as OAuth Client

• Go back to your Joomla Dashboard. Then go to Step 2 [Client ID & Secret].
• Paste the Client ID, Client Secret and Domain. Also Set Client Credentials In Header and Body then click on Save Settings. Once Settings are saved then click on Save Configuration.

• Scope & Endpoints are given below, which are required for configuring Joomla as OAuth Client plugin to configure miniOrange as a custom OAuth or OIDC provider.

Scope	openid email profile
Authorize Endpoint	https://<miniOrange-domain>.xecurify.com/moas/idp/openidsso
Access Token Endpoint	https://<miniOrange-domain>.xecurify.com/moas/rest/oauth/token
Get User Info Endpoint	https://<miniOrange-domain>.xecurify.com/moas/rest/oauth/getuserinfo
Set Client Credentials	In Header and In Body