The MC Professional Authentication and User Sync plugin integrates your WordPress site with MC Professional. It enables single sign-on (SSO) for your members and synchronizes user records between MC Professional and WordPress accounts. This lets you restrict content access on your WordPress site based on member groups and maintain consistent authentication.
On this page
Overview
With this plugin, enable SSO to sync users between your MC Professional and WordPress accounts, control access permissions, and customize your WordPress login screen. Key features of the WordPress integration include:
- Single sign-on (SSO): Members access WordPress with their MC Professional credentials.
- Role and profile sync: User roles and profile data stay synced between MC Professional and WordPress.
- Content access control: Restrict access to WordPress content based on MC Professional member groups.
- Custom login and authentication: A customizable login button and user authentication process.
Part 1: Authorize WordPress in your MC Professional account
Prerequisite: You must be an authorized service administrator in your MC Professional account to access the API Management page.
To authorize WordPress to access your MC Professional account:
- In your MC Professional account, go to Settings > Account settings > API Management.
- On the API Management page, select CREATE API CLIENT.
- Name your new API client, then select CREATE API CLIENT in the pop-up window.
- On the API Client Settings screen, select Authorization Code, Resource Owner Password Credentials, and Client Credentials.
- Under Groups, select Admin.
- Enter the Redirect URI. This must be the address of your WordPress site.
- Select Save.
http://40.111.8.966
Take note of the Client ID and Client Secret on this page. You must enter these credentials in WordPress to connect with your MC Professional account. For more information, see API management.
Part 2: Install the MC Professional SSO plugin in WordPress
Before you start, complete Part 1 to configure an API client in your MC Professional account. The API client allows secure communication between WordPress and MC Professional.
- Log in to your WordPress site.
- In your WordPress dashboard, point to Plugins in the sidebar menu and select Add New Plugin.
- In the Search field, enter MC Professional Authentication and User Sync.
- Select Install Now.
- After the installation is complete, select Activate.
- In your dashboard, select MC Professional.
- On the MC Professional Login Settings screen, enter the unique values that were provided during the API authorization:
- Client ID
- Client Secret
- Domain
- (Optional) Modify the Login Button Label.
- (Optional) Update the default text in the Login Form Message.
- Select Save Changes.
- Select Test API Client Credentials.
- Select Synchronize WordPress Roles.
Enter the domain in this format: orgid.memberclicks.net. Replace orgid with your organization ID.
Test API Client Credentials verifies that the client credentials, such as the API key, are correct and configured for secure communication between WordPress and MC Professional. Synchronize WordPress Roles updates your WordPress roles to include your MC Professional member groups. Existing roles are not removed.
After you complete these steps, your WordPress site is integrated with MC Professional, with authentication and user synchronization between both platforms.
Managing user authentication and content access
To restrict access to specific content based on MC Professional member groups, you need a content management plugin that supports role-based content restriction. These plugins have been tested for this purpose:
After you install one of these plugins, manage access by configuring content visibility according to the user roles synchronized from MC Professional.
FAQs
Answers to common questions about the WordPress integration.
How do I configure the API client in MC Professional?
For steps, see API management. The API client requires these grant types for authentication: Authorization Code, Resource Owner Password Credentials, and Client Credentials. The Admin group must also be selected and have the appropriate access, edit or read-only, configured in the Group Attribute Security settings. For more information, see Group Attribute Security.
How do members log in with their MC Professional credentials?
Installing the MC Professional Authentication and User Sync plugin adds an SSO button to the WordPress login screen. When members select the MC Professional login button, they are redirected to your MC Professional site to enter their credentials. After they log in, they are redirected back to your WordPress site.
By default, WordPress allows a single user per email address. If a duplicate user is detected, a new account is still created, and the email field shows a modified, duplicate email value.
How do I restrict WordPress content to MC Professional members?
Install a content management plugin, then control content access in WordPress based on user roles. Synchronize user roles in WordPress with your member groups in MC Professional. For the tested plugins, see Managing user authentication and content access.
How do I update member profile data so that it synchronizes between MC Professional and WordPress?
Update member profile data only in MC Professional. This information syncs to WordPress when the member logs in, and refreshes with each subsequent login. Changes made to user profiles in WordPress don’t sync back to the MC Professional member profile.
Can members reset their password on the WordPress login page?
The MC Professional password can’t be set through WordPress. The Forgot Password link on the login page resets only WordPress credentials.
How long does the WordPress session stay active?
By default, a WordPress user stays logged in for 48 hours, or for 14 days when they select Remember me.
If a member logs out of WordPress, do they stay logged in to MC Professional?
When a user who is signed in to both WordPress and MC Professional logs out of WordPress, their MC Professional session also ends.