Set up WordPress OAuth2 SSO

Enabling WordPress SSO

You need the following information to configure WordPress SSO:

Client ID (required): An alphanumeric string publicly exposed and used by the service API to identify your application. This is also used to build authorization URLs presented to your users.
Client Secret (required): A secret known only to your application and the authorization server. It protects your resources by granting tokens only to authorized requestors.
WordPress Domain (required): The domain URL of your WordPress website.
Login Button Text (required): The text that appears on your login page for users. You can enter any text. Example: "Login with SSO"
Redirect URI (required): The URL where your browser redirects after authentication is complete.

Follow these steps to locate your WordPress domain, Client ID, and Client Secret:

Visit your WordPress website.
Go to Plugins > Add New and wait for the page to load.
Search for OAuth in the top right and install the WP OAuth Server (OAuth Authentication) plugin.
After installation, go to your WordPress admin dashboard. Navigate to OAuth Server > Clients and click Add New Client.
On the next page, enter the following information:
- Client Name: Enter any name of your choice.
- Redirect URI: Enter your site URL appended with /ssos/redirect.
  Example:
  Your site URL: https://community4.blogha.com
  Redirect URI: https://community4.blogha.com/ssos/redirect
- Client Credential Assigned User: Select one of your admin users.
Click Create Client. On the confirmation page, you will see your Client ID, Client Secret, and WordPress Domain.

Log into Bettermode with your admin account. Click your profile picture in the top right corner, then select Administration > Settings > Authentication. Click the Enable button next to "Single sign-on".
Select WordPress as your SSO Provider. Enter the following information from the previous section:
- Client ID
- Client Secret
- WordPress Domain
- Login Button Text
Note: All fields are required.
Toggle the Enable OAuth2 switch to on and click Update.
Your WordPress OAuth2 SSO is now active and ready to use.
Visit your site URL (example: https://community1.blogha.com) and click the login button. Authenticate using your credentials on the SSO login page.

If you want members to be directed to the SSO provider page when they open your site, you need to disable the "Login & register with email" option.

To disable this option:

Once disabled, your users will no longer see the default email and password login option.