Integrating with WordPress: Single sign-on (SSO)

On this page

• Overview
• Integrating with WordPress 
• Part 1: Authorize WordPress in your MC Professional account
• Part 2: Install the MC Professional WordPress plugin in WordPress
• Managing user authentication and content access
• FAQs  

Overview

The MC Professional Authentication and User Sync plugin integrates your WordPress site with MC Professional, enabling Single Sign-On (SSO) for your members and synchronizing user records between your MC Professional system and WordPress accounts. This allows you to restrict content access on your WordPress site based on member groups and maintain consistent authentication.

With this plugin, you can enable single sign on to sync users between your MC Professional and WordPress accounts. You can also control access permissions and customize your WordPress login screen. Key features of the WordPress integration include:

Part 1: Authorize WordPress in your MC Professional account

You must be an authorized service administrator in your MC Professional account to access the API Management page.

To authorize WordPress to access your MC Professional account, follow these steps:
1. In your MC Professional account, navigate to Settings > Account settings > API Management.

2. On the API Management page, click CREATE API CLIENT. Name your new API client, then click CREATE API CLIENT in the pop-up window.

3. On the API Client Settings screen, ensure that Authorization Code, Resource Owner Password Credentials, and Client Credentials are checked off.

4. Under Groups, select Admin.

The Admin group must be selected and granted the appropriate access level (edit or read-only) in the Group Attribute Security settings.

5. Enter the Redirect URI. This must be the address of your WordPress site.

Do not include any trailing backslashes. Example format: http://40.111.8.96
6. Ensure that you click Save in the top-right corner of the page.

Take note of the Client ID and Client Secret on this page. You must enter these credentials in WordPress to connect with your MC Professional account. For more information, see API management.

Part 2: Install the MC Professional SSO plugin in WordPress

To set up the plugin, you'll need to configure an API client in your MC Professional account. This step allows secure communication between WordPress and MC Professional.

1. Log in to your WordPress site.
2. From your WordPress dashboard, hover over Plugins in the sidebar menu and select Add New Plugin.

3. In the Search field, enter MC Professional Authentication and User Sync
4.  Click the Install Now button.
5. Once the installation is complete, click the Activate button.
6. In your dashboard, select MC Professional.

7. On the MC Professional Login Settings screen, enter the following unique values that were provided during the API authorization:

• Client ID
• Client Secret
• Domain

Domain should be entered in the following format: orgid.memberclicks.net. Replace orgid with your organization id.

You can customize the WordPress login screen by adjusting the Login Button Label and the Login Form Message in the plugin settings. For a personalized user experience, we recommend including your organization's name in these fields. 

8. Modify the Log in Button Label as needed. 
9. Update the default text displayed in the Login Form Message.

Members must use the custom login button to access Single Sign-On (SSO) for both platforms.

10. Select Save Changes.
11. Select Test API Client Credentials.

This step verifies that the client credentials (such as the API key) are correct and properly configured for secure communication between WordPress and MC Pro.

12. Select Synchronize WordPress Roles.

This step updates your WordPress roles to include your MC Professional member groups. Existing roles will not be removed during this process.

After completing these steps, your WordPress site should be successfully integrated with MC Professional, enabling authentication and user synchronization between the two platforms.

Managing user authentication and content access

To restrict access to specific content based on member groups from MemberClicks Professional, you'll need a content management plugin that supports role-based content restriction.

Some plugins that have been tested for this purpose include:

• Content Control
• Restrict User Access
• Block Visibility

Once you install one of these plugins, you can manage access by configuring content visibility according to the user roles synchronized from MC Professional. 

Frequently Asked Questions

How do I configure the API client in MC Professional?
For steps on configuring an API client, see API management. The API Client requires the following grant types for authentication: Authorization Code, Resource Owner Password Credentials, Client Credentials. The admin group must also be selected and have the appropriate access (edit or read-only) configured in the Group Attribute Security settings. Learn more about Group Attribute Security here. 

How do members log in using their MC Professional credentials?
Installing the MC Professional Authentication and User Sync plugin adds an SSO button to the WordPress login screen. When members click the MC Professional login button, they are redirected to your MC Professional site to enter their credentials. After successfully logging in, they will be redirected back to your WordPress site.

By default, WordPress only allows one user per email address. If a duplicate user is detected, a new account will still be created, and the email field will display a modified, duplicate email value, as shown below.

How do I restrict WordPress content to MC Professional members?
To restrict WordPress content to MC Professional members, you must first install a content management plugin.

The following content management plugins have been tested:

• Content Control
• Restrict User Access
• Block Visibility

After installing and activating the content management plugin, you can control content access in WordPress based on user roles. You can synchronize user roles in WordPress with your member groups in in MC Professional.

How do I update member profile data to ensure it synchronizes between MC Professional and WordPress?
Member profile data should only be updated in MC Professional. This information will automatically sync to WordPress upon member login and will continue to refresh with each subsequent login. Any changes made to user profiles in WordPress will not be synced back to the MC Professional member profile.

Can member's reset their password via the WordPress login page?
Currently, the MC Professional password cannot be set through WordPress. The "Forgot Password" link on the login page only allows users to reset their WordPress credentials.

How long does the WordPress session remain active before timing out?
By default, a WordPress user stays logged in for 48 hours, or for 14 days when they select "Remember me."

If a member logs out of WordPress, will they remain logged in to MC Professional?
When a user who is signed into both WordPress and MC Professional logs out of WordPress, their session in MC Professional also ends.