• Resolved Jeff Rose

    (@talus)


    First – I may be totally incorrect about what this plug does/can do, but I hope not as it looks great!

    We have a long-standing website at abc.com with thousands of users and we have a new WordPress site at xyz.com where we want to allow abc.com members to view content with their abc.com login.

    On abc.com we have JWT SSO set up with other services and a dev team who understand that. How do we integrate this with our xyz.com WordPress site using this plugin, so users can click a “View Content” link, go to abc.com to authenticate and then redirect to xyz.com and be autologged in.

    I understand that somehow xyz.com needs to have a local account created, ideally invisible from the user, so they just use SSO, but I can’t see how that gets set up. We don’t want users to register directly on xyz.com (WordPress).

    Thanks to anyone who can help me understand this.

    • This topic was modified 4 years, 1 month ago by Jeff Rose.
Viewing 1 replies (of 1 total)
  • Plugin Author Nicu Micle

    (@nicu_m)

    Hello @talus,

    Sorry for my late response.

    This plugin allows you to login to a WordPress website using a JWT token.

    Your scenario is possible with this plugin.

    Let me give you a example of a scenario, that might help you:
    1. You create a new user on abc.com ( for example Viewer)
    2. You install simple-jwt-login on abc.com and set a secret encryption key.
    3. On abc.com, you call the authorization endpoint, with the credentials of the newly created user.
    4. On the website xyz.com, you will use the JWT, previously generated on abc.com, and your users from here will be able to fetch the content as a signed user (viewer) from abc.com. Also, your users from xyz.com will be able to automatically login into xyz.com, without having to know the credentials of the user

    Please let me know if you need my help.

    Best regards,
    Nicu.

Viewing 1 replies (of 1 total)
  • The topic ‘Help Understanding Flow’ is closed to new replies.