• Hi there,

    Great plugin! Thanks for creating it!

    I have a couple of site I would like to use it on, both of which are gated sites for logged in users only, we are using the “Force Login” plugin on, to make sure only logged in users can access the sites content.

    Would it be possible to either make this plugin compatible with “Force Login” or add a feature in this plugin to require login to view access the site?

    Cheers,
    Billy

Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter billygubby

    (@billygubby)

    Further to my comment above, it think this is likely that the force login plugin is redirecting to the main login page when clicking the SSO button, so i need to add a exception to allow the site to go to the URL for SSO?

    Plugin Author Marco

    (@qlcvea)

    Hello, I was planning on testing the Force Login plugin before replying, but if it allows for exceptions to be created, then adding exceptions for both the Start and Callback URLs may make login work.

    Thread Starter billygubby

    (@billygubby)

    Hi Marco,

    I can confirm that adding the exception in Force Login fixed the issue. I added an exception for url’s containing “sso_for_azure_ad”.

    Cheers,
    Billy

    Plugin Author Marco

    (@qlcvea)

    Hello,
    the only URLs to unblock for this plugin to work should be those shown in the options page, although they should be allowed to contain additional query parameters.

    Simply unblocking all URLs containing “sso_for_azure_ad” may cause unintentional side effects allowing access to other pages.

    Dima

    (@dimastorozhuk)

    @qlcvea So what is best aproach here? What do you suggest about the URLs patter that should be unblocked in Force Login?

    Thread Starter billygubby

    (@billygubby)

    I added exceptions in the functions.php file for the following URLs only:

    /?sso_for_azure_ad=callback
    /?sso_for_azure_ad=start

    As per the end points detailed in the SSO plugin, this allowed access to these pages and SSO functions as expected.

    Cheers,
    Billy

    Plugin Author Marco

    (@qlcvea)

    Hello,

    I can confirm excluding the only URLs that need to be accessible without logging in are the start and callback URLs.

    However, the exact values that need to be excluded may vary depending on whether the “Use rewrites” option is enabled.

    The exact URLs for a particular site are displayed in the plugin’s options page.

    • This reply was modified 9 months, 3 weeks ago by Marco.
Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Conflict with Force Login plugin’ is closed to new replies.