• Resolved jscottd

    (@jscottd)


    I want to understand how WF Central authenticates when sites are added. I had one site that I initially added to WF Central. A week later I added 2 other sites and they were just added without asking for authentication. A third site that I added had WF installed but I hadn’t yet completed configuration, when I added the site it took me into WF on the site (admin pages) to complete setup.

    All of these are on the same server, when I tried adding a site that is on a different server it took me to the login page, which is reasonable, but why was I not challenged with the other 3?

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @jscottd, thanks for reaching out.

    It looks like you’ve had some different-looking scenarios because of the status at those WordPress sites at the time. The one that took you to the login page must’ve been logged out, but you were either recently signed in or at least still holding an active cookie for an administrative user at the ones that didn’t ask. The site that took you to complete setup is because Wordfence prioritizes resolving an incomplete setup after installation so will have automatically directed you there rather than the regular WF dashboard.

    Wordfence Central uses the WordPress REST API to communicate with the plugin. In most cases, the easiest way to add connections are from Wordfence Central as you have done, which will then redirect to your site during this process to authenticate. However, you can also select “Connect this site” in the Wordfence Central widget from the Wordfence dashboard directly to trigger the action the opposite way around.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘How does WF Central authenticate’ is closed to new replies.