OpenAM Authentication

ہرہک دے سوال

Installation Instructions

1. Upload openam-wordpress-plugin directory to the /wp-content/plugins/ directory
2. Activate the plugin through the ‘Plugins’ menu in WordPress
3. As a WordPress administrator, of to the page ‘Settings’>’OpenAM-REST Plugin’ and configure your OpenAM parameters

What is it needed to make this plug-in work

1. An OpenAM server up and running. It can be installed anywhere, as long as WordPress can reach it. The OpenAM requires certain REST APIs, hence OpenAM 10.x and above is required.
2. Your wordpress installation up and running. This plug-in was written and tested for WordPress 3.9.2 to 4.4.2, but it might work with previous versions.

Do I need an OpenAM Policy Agent?

No, a Policy Agent is not needed

Does the Plug-In requires redirect to the OpenAM Login page?

Not necessarily. If the OpenAM Authentication module or Service chain you are using, does not require more credentials than user and password, then no redirect is necessary

Redirection is optional and it is configurable from the settings page. Redirection is recommended if your authentication is more complex, for example if you use multifactor authentication or your credentials are more than user and password.

How does it implement SSO with OpenAM?

It looks for a session cookie in the domain where the WordPress is installed, if there is no such session cookie, then it will require to authenticate. If the cookie is found with a session pointer valid, then the plugin will authenticate automatically to WordPress.
A proper cookie domain setting is necessary for SSO to work. You need to check with your OpenAM Administrator what domain is used to set the session cookie.

Once the authentication has taken place, it will set the session in the cookie that you have configured in the plug-in (this is usually the same cookie as the one the OpenAM is using).

Does the plug-in logs me out from OpenAM when I logout from WordPress?

Logging-out from OpenAM is optional. It is configurable by the administrator.

Why did you write this plug-in?

We have implemented this plugin keeping in mind that the latest plugins are obsolete and were written for OpenSSO. They have not evolved, hence have become obsolete or unusable with the newest version of WordPress. Also this plugin takes advantage of the REST interface in OpenAM and makes it lightweight.