Skip to main content

Setting up SSO on WordPress

Disqus avatar
Written by Disqus
Updated over a week ago

**Access to Single Sign-On (SSO) is currently available as an add-on for users with a Business level subscription. If you would like to subscribe, you can request information from one of our account managers here.

Configure your remote domain

Before you start, you will first have to go to your SSO page to configure your remote domain. Once done, you'll be able to test the payload you create after SSO as been setup. Try to refrain from using any non-alphanumeric characters to prevent conflicts from happening. The name assigned to your remote domain is permanent and non-transferable. Additionally, the SSO Remote Domain will be used for all sites within the Organization, so choose a Remote Domain value with this in mind.

Note that it is only possible to create one remote domain per user account/Organization. If a new remote domain is required, we will need to set up a new Organization Owner account, which will then be able to set up a new SSO Remote Domain.

Configure your application

If you haven't setup an API application yet, do so using our guide. In order for SSO to function properly you'll need to verify that you've setup the following items in your API application:

  • Domains - Enter each domain that will be using SSO.

  • SSO Domain - Select the remote domain previously setup.

  • Authentication - Use OAuth permissions as the authentication method

Note: If you are using the deprecated Inherit Permissions authentication you can safely update to OAuth permissions to use SSO. If you're making any API calls using this application, you can attach admin privileges to any API request by adding your access token and the appropriate scope parameters.

Populate your WordPress SSO Settings

Before you can enable SSO through the Wordpress plugin, you'll first need to fill out the Site Configuration tab of the plugin completely, including the shortname of your site, and your API public and secret keys. Please note that the API keys used must correspond to the API application created by the Organization Owner account, and that API application must be set up for SSO. More information on these requirements can be found here.
​
Once these pieces have been completed, you may enable SSO for your site by clicking the checkbox under the Single Sign-on tab. You can optionally add an image to be used as your site-specific login button, which will appear above the social login options when a user is logged out.

Ensure that "Anyone can register" is checked in Wordpress settings

This allows visitors to register on your site.

Troubleshooting

  • Verify that a the remote_auth_s3 payload is being generated within your markup.

  • Copy the remote_auth_s3 payload generated and paste it in our payload debugger.

  • Additional steps can be found in our SSO Debug Checklist.

Tip: If the login window does not close automatically, you can use a Javascript snippet to close it. For more information, please visit: Window close() Method at W3 Schools.

Did this answer your question?