I'm testing Authorizer for my university since many site owners already use this plugin for CAS and were implementing Okta. Okta supports
- OIDC
- SAML 2.0
- SWA (Secure Web Authentication): A proprietary Okta protocol that allows SSO for applications that do not support federated standards (SAML/OIDC) by securely storing and passing credentials.
- WS-Federation (WS-Fed): Used primarily for integration with Microsoft applications
I'm attempting OIDC. Unfortunately, when I am signing in, I see this error:
OIDC authentication failed. Cannot supply multiple client credentials. Use one of the following: credentials in the Authorization header, credentials in the post body, or a client_assertion in the post body.
I have set up the plugin's OIDC settings in this way:
Authorizer OIDC Settings
General
| Field |
Value |
| OIDC server(s) |
1 |
| OIDC automatic login |
Off |
| Custom label |
Okta Preview |
OIDC Provider Configuration
| Field |
Value |
| Issuer URL |
https://xyz.oktapreview.com/oauth2/default |
| Client ID |
redacted |
| Client Secret |
refracted |
| Scopes |
openid email profile |
| Prompt parameter |
(blank) |
| Login hint parameter |
(blank) |
| Max age parameter |
(blank) |
User Attribute Mapping
| Field |
Value |
| Attribute containing username |
email |
| Attribute containing email |
email |
| Attribute containing first name |
given_name |
| Attribute containing last name |
family_name |
Account Handling
| Field |
Value |
| Name attribute update |
Do not update first and last name fields on login |
| Require verified email |
false |
| OIDC users linked by username |
false |
| OIDC Hosted Domain |
(blank) |
Here is how things are set up in Okta.
Okta Application Configuration
Application Overview
| Field |
Value |
| Application name |
WordPress Test |
| Status |
Active |
| Application type |
Web |
Client Credentials
| Field |
Value |
| Client ID |
redacted |
| Client authentication |
Client secret |
| PKCE required |
false |
Client Secrets
| Field |
Value |
| Secret status |
Active |
| Secret created |
Apr 29, 2026 |
Public Keys
| Field |
Value |
| Key storage |
Save keys in Okta |
| Public keys configured |
None |
| ID token encryption |
None |
Security Settings
| Field |
Value |
| DPoP required |
false |
| Token usage IP restriction |
Any IP |
Grant Types
| Field |
Value |
| Authorization Code |
true |
| Refresh Token |
false |
| Client Credentials |
false |
User Consent
| Field |
Value |
| Require consent |
true |
| Terms of Service URI |
(blank) |
| Policy URI |
(blank) |
| Logo URI |
(blank) |
Login Configuration
| Field |
Value |
| Sign-in redirect URI |
https://wptest.xyz.edu/wp-login.php?external=oidc |
| Allow wildcard redirect URI |
false |
| Sign-out redirect URI |
(blank) |
| Login initiated by |
App Only |
| Initiate login URI |
(blank) |
Email Verification Experience
| Field |
Value |
| Callback URI |
(blank) |
Logout Settings
| Field |
Value |
| Global token revocation logout handling |
Disabled |
I'm testing Authorizer for my university since many site owners already use this plugin for CAS and were implementing Okta. Okta supports
I'm attempting OIDC. Unfortunately, when I am signing in, I see this error:
OIDC authentication failed. Cannot supply multiple client credentials. Use one of the following: credentials in the Authorization header, credentials in the post body, or a client_assertion in the post body.
I have set up the plugin's OIDC settings in this way:
Authorizer OIDC Settings
General
1OffOkta PreviewOIDC Provider Configuration
https://xyz.oktapreview.com/oauth2/defaultopenid email profileUser Attribute Mapping
emailemailgiven_namefamily_nameAccount Handling
Do not update first and last name fields on loginfalsefalseHere is how things are set up in Okta.
Okta Application Configuration
Application Overview
WordPress TestActiveWebClient Credentials
Client secretfalseClient Secrets
ActiveApr 29, 2026Public Keys
Save keys in OktaNoneNoneSecurity Settings
falseAny IPGrant Types
truefalsefalseUser Consent
trueLogin Configuration
https://wptest.xyz.edu/wp-login.php?external=oidcfalseApp OnlyEmail Verification Experience
Logout Settings
Disabled