Forum Replies Created

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @jonathanafranio89,

    Greetings from miniOrange. Thank you for trying out our plugin! We appreciate the feedback.

    I would like to inform you that OAuth2 is designed primarily for delegated API access, and not user session management. The token lifecycle and the user’s login session are conceptually separate. What you are observing is expected behavior in a standard OAuth 2.0 flow. Access tokens are designed to be independent of the user’s session on the server. Once an access token is issued, it remains valid until it either expires or is explicitly revoked. Logging out of WordPress (which ends the user’s session) does not automatically invalidate existing tokens. This is not a flaw but rather part of the OAuth 2.0 specification.

    Consider an example – You are using a project management web application like Jira / Asana / Trello as your OAuth server, and you login into a third party time tracking app using your project management app, to give access to projects and tickets. If you logout of your project management app in your browser, the time-tracking app can still pull data using the token until it expires. That’s because the token represents delegated access to the API, not your active web session.

    We have reached out to you over email as well, please let me know if you would like to discuss further.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @easysolutions,

    Could you please elaborate more on your requirements? What kind of integration do you wish to achieve?

    The SAML IDP (Identity Provider) plugin allows your WordPress site to act as a SAML compliant Identity Provider, and can be configured with any SAML compliant Service Provider such that once the user is logged in into your WordPress site, he / she can perform SSO into the configured application, without having to enter the credentials again.

    You can also schedule a quick technical discussion with our team by raising a ticket using the support form in our plugin, or by visiting our website.

    Thanks for trying out miniOrange!

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @dylandawg,

    I believe your query has been resolved.

    Please feel free to reach out if you need anything.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @dylandawg,

    It looks like you wish to your XenForo installation as an OAuth Server, so that your users on XenForo can login into the WordPress site automatically.

    This can be achieved by using our WordPress OAuth SSO plugin. Once the plugin is configured, your XenForo users will be able to login on WordPress without registering.

    You can also raise a ticket using the support form in the plugin, and one of our support engineers can set up a quick video conferencing session to assist you with the configuration.

    Please feel free to reach out if you need anything.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @sprucelydesigned,

    This issue you faced was introduced in v6.0.4 of the plugin, and we have patched it in v6.0.5. Please update to the latest version for a seamless SSO.

    Thanks for using miniOrange. Please do not hesitate to reach out if you need anything.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @jorgeocampo,

    Adding a button or shortcode to initiate the Single Sign-On from the Identity Provider side is one of our Premium offerings. With the Free version, you can initiate the Single-Sign On from the Service Provider and achieve Single Sign-On.

    I believe that you have already raised a ticket on our email support desk. Please feel free to respond on the email thread for any additional queries that you have.

    Thanks for trying out miniOrange!

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @francifoto988,

    This seems like an error in configuration with automatic user creation, also known as Just-in-time User Provisioning.

    Since you are no longer using our WP OAuth Server plugin, we will close this ticket.

    Please use the support widget in our Login Using WordPress Users plugin to raise a new support ticket with us to address the Just-in-time User provisioning error, we will be happy to assist you.

    Thank you!

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @francifoto988,

    Thanks for reaching out to us!

    My understanding is that, you wish to enable SSO for your Nextcloud server using your WordPress site as the Identity Provider such that once the user logs in into your WordPress site, he should be able to SSO into the Nextcloud server without having to authenticate again. Please correct me if I am wrong, or if I missed something.

    This can be achieved by using our Login Using WordPress Users plugin. With the help of this plugin, your WordPress site will act as an SAML compliant Identity Provider, and can be used to configure the SSO with Nextcloud such that once the user logs in into the WordPress site, he will be automatically logged in into the Nextcloud server without having to authenticate again. I believe this is your desired experience.

    Here is a step-by-step guide to configure the WordPress – Nextcloud SSO.

    Please use the support form in the plugin to raise a support ticket with us, and we can help you in configuring the plugin and setting up the SSO on your WordPress site.

    Thanks,
    Nimesh

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hi @marcus182

    Thanks for reaching out to us!

    It looks like you wish to enable SSO for your Freshdesk portal for your end-users (customers) such that, once they are logged in into the WordPress site, they should be able to SSO into the Freshdesk portal without having to authenticate again.

    This is one of our Premium features, known as IDP-initiated Single Sign-On. In this case, instead of triggering the login process from the Freshdesk portal, your users can directly click on a link from the WordPress site itself and will be automatically logged in into the Freshdesk portal. I believe this is your desired login experience.

    Please feel free to raise a request for a free demo of the Premium version from the plugin installed on your WordPress website. We will be happy to show you a tailor-made demo of your use-case.

    Thanks!

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @jaytfl ,

    Thanks for your response.

    We have received your support ticket, and our technical team is currently investigating the issue. We will get back to you over email with updates.

    Thank you for your support.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @jaytfl ,

    In that case, could you please enable troubleshooting in the miniOrange OAuth Server plugin, and reproduce the issue?

    Once done, please use the Support Widget in the bottom right corner of the plugin, to raise a ticket with our technical support team to assist you further with this.

    Looking forward to hearing from you.

    Plugin Contributor Nimesh

    (@nimeshatxecurify)

    Hello @jaytfl ,

    Thanks for reaching out to us!

    The error message indicates that the authorization code received at the token endpoint is expired, and therefore our plugin is unable to process the request further.

    Since every authorization code has an expiry period, that might be the reason behind the error, in case you are re-using the same authorization code from your previous requests. I would recommend using the fresh authorization code while making a request to the token endpoint.

    In case you need further assistance, please enable troubleshooting in our plugin, and reproduce the issue. You can then reach out to us using the Support widget in the plugin, and we will be able to assist you further.

    Please feel free to contact us if you need anything!

Viewing 12 replies - 1 through 12 (of 12 total)