# How to get SSO working with a Wordpress site? I’m a noob

**URL:** <https://meta.discourse.org/t/how-to-get-sso-working-with-a-wordpress-site-i-m-a-noob/74334>\
**Category:** WordPress\
**Created:** [18 Novembre 2017, 7:42pm UTC](https://meta.discourse.org/t/how-to-get-sso-working-with-a-wordpress-site-i-m-a-noob/74334 "2017-11-18T19:42:26Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)\
**Post date:** [18 Novembre 2017, 9:26pm UTC](https://meta.discourse.org/t/how-to-get-sso-working-with-a-wordpress-site-i-m-a-noob/74334/6 "2017-11-18T21:26:24Z")

</div>

> [@destinationsound](#):
>
> As of right now I have followed the guides located within these forums and haven’t been successful in making SSO work.

On the wp-discourse Connection tab are you getting the ‘You are connected to Discourse!’ message?

If so, and you can’t get SSO working, are you using the DigitalOcean 1 click WordPress install? The last time I checked, it doesn’t install the `php-curl` extension. `php-curl` is required for SSO to work when HTTPS is enabled.

You can’t go wrong by installing it. This is a good guide: [How To Install WordPress with LEMP on Ubuntu 16.04 | DigitalOcean](https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-lemp-on-ubuntu-16-04#step-3-install-additional-php-extensions)

> [@destinationsound](#):
>
> How does SSO share the login data

There is no Discourse login data saved on WordPress. The first time a user logs into Discourse from WordPress, Discourse checks if there is an existing user with the email address that is sent from Discourse. If there is, a `SingleSignOnRecord` is created for that user. The `SingleSignOnRecord` stores the user’s WordPress ID. On subsequent logins, the WordPress user’s ID is used to find the Discourse user. If a user without an account on Discourse logs in from WordPress, a new user and `SingleSignOnRecord` is created.

The biggest security risk in using SSO is if email addresses on the WordPress site are not being verified. The wp-discourse plugin checks whether or not an email address is verified. If it isn’t, it tells Discourse to send an activation email before the user is able to login to Discourse.

---

_[View the full topic](https://meta.discourse.org/t/how-to-get-sso-working-with-a-wordpress-site-i-m-a-noob/74334)._