DOWO
Home Documentation Support Start a project

Microsoft Entra Setup

Last updated 2 months ago

This guide covers the Microsoft Entra app registration required by DOWO WP Entra Login.

Before you start, note your plugin's Redirect URI. After activating the plugin it is shown at the top of Settings -> Entra Login, and it looks like:

https://www.your-site.com/wp-login.php?action=dowo-wpentra-callback

Copy this exact value. You will paste it into Entra.

1. Create the App Registration

  1. Sign in to the Microsoft Entra admin center or the Azure portal.

  2. Go to Identity -> Applications -> App registrations.

  3. Click New registration.

  4. Name: e.g. WordPress - www.your-site.com.

  5. Supported account types: choose Accounts in this organizational directory only (Single tenant) for a normal corporate site.

  6. Redirect URI: set the platform to Web and paste your plugin's Redirect URI:

    https://www.your-site.com/wp-login.php?action=dowo-wpentra-callback

  7. Click Register.

2. Copy the Identifiers

On the application's Overview page, copy:

  • Application (client) ID
  • Directory (tenant) ID

You will paste both into the plugin.

3. Create a Client Secret

  1. Go to Certificates & secrets -> Client secrets.
  2. Click New client secret.
  3. Add a description, for example WordPress Login - MM YYYY.
  4. Choose an expiry, for example 12 or 24 months. Set a calendar reminder to rotate it.
  5. Click Add.
  6. Immediately copy the secret Value, not the Secret ID. It is shown only once.

The Value column holds the secret you need. The Secret ID is just a reference and will not work.

4. Require MFA

MFA is enforced by Entra. See MFA.md for how to require MFA for this application using a Conditional Access policy.

Next Step

Continue with WordPress plugin setup.