Scouting OpenID Connect

A WordPress plugin for logging in with Scouting Nederland OpenID Connect Server. This plugin allows users to authenticate and login to their WordPress websites using their Scouting Nederland OpenID Connect credentials. It provides a secure and convenient way for Scouting Nederland members to access their WordPress sites without the need for separate login credentials. With this plugin, users can seamlessly integrate their Scouting Nederland accounts with their WordPress websites, enhancing the user experience and simplifying the login process.

Make sure you have the role webmaster in mijn.scouting.nl.

1. Go to https://login.scouting.nl, click on Managed websites and click on Add OpenID Connect connection.
2. Add the name of your group/website.
3. Add the Redirect URI, for example: https://example.com/.
4. Add the Post Logout Redirect URI, for example: https://example.com/.
5. Select the scopes you want to use. The Email, Personal and Membership scopes are required; \ The Address, Phone number scope is optional. \ Currently the Parents/guardians scope is not supported.
6. Select the organizations that can log in. \ If your organization has sub-organizations, you can also select Allow suborganizations.
7. Select to use the PKCE (code challenge).
8. Press Add Website.
9. Find the website you just created and click on ⓘ.
10. Copy the Client ID, Client secret, and the scopes to your website.
11. Fill in the OpenID Connect Settings with the copied data. Make sure the required scopes are present:
12. openid (Required)
13. membership (Required)
14. profile (Required)
15. email (Required)
16. address (Optional)
17. phone (Optional)
18. Fill in the General Settings.
19. Press Save Settings.
20. Log out and try to log in with the Scouts Login button.

2.3.0

• Added a settings option to define how duplicated emails should be handled: plus addressing or return an error.
• When sending an email via WordPress, the plus addressing is removed so the user does not see it.
• Fixed fallback conditions for phone and address fields in WooCommerce.
• Added a custom hook for new user registration: scouting_oidc_user_register.

2.2.0

• Add support for phone and address scopes to store phone number and address data in user profiles.
• Require PKCE (Proof Key for Code Exchange) to be configured in OIDC.
• Update default scopes to include address and phone in addition to existing scopes.
• Add WooCommerce integration to automatically sync user data (name, phone, address) to WooCommerce billing and shipping fields.
• Hide phone and address fields from user profile when WooCommerce is active to prevent duplication.
• Improve user profile field rendering with readonly instead of disabled for better accessibility.

2.1.0

• Tested up to: 6.9
• Add logout redirect host allowlist handling in scouting_oidc_auth_logout_redirect() to permit external logout URLs.
• Clear user cache after username updates (clean_user_cache) to avoid stale user data.
• Trigger core wp_login and plugin-specific scouting_oidc_wp_login actions when programmatically logging in.

2.0.1

• Make upgrading from 1.2.0 to 2.0.0 backwards compatible.

2.0.0

• Use version 2.0.1 instead for backward compatibility with version 1.2.0.
• membership scope is now required to obtain the SOL Member ID.
• infix is removed from user this was conflicting with WooCommerce, the infix is now added before the last name.
• Removed the prefix field from the general settings.
• Removed the SOL ID field profile this is now the UserName of the WordPress User.
• Improved error messages and redirects for missing or invalid user data or OIDC scopes.
• Updated setup and support documentation to reflect the new identification model.

1.2.0

• Add custom redirect option for successful login.

1.1.0

• Add option to redirect only SOL users.

1.0.2

• Tested plugin up to WordPress 6.7.2 => 6.8.0

1.0.1

• Fixed hook wp_login
• Tested plugin up to WordPress 6.7.1 => 6.7.2

1.0.0

• Initial release