Oauth2 integration for clients like Wordpress in Ory Network?

[star26bsd]

Hello there ...

This might be a question of the sort of "rtfm", but believe me, I tried :) Still, I can't get my head around a very basic question so I hope someone can shed some light on it.

My use case:
I want to authenticate my users against a central database that holds all identities, including passwords etc and have those be able to SSO to my Wordpress website. I figured Ory Network might be the right choice. It allows me to bypass solving many credential-related tasks myself (as storing credentials on a PHP based shared-hosting environment).

On my Wordpress site, I use a plugin called "Custom OAuth 2.0 Single Sign-On (SSO)". It asks for Authorization Endpoint as well as Access Token Endpoint which I can't find in the UI of Ory Network. I did poke around in the "Oauth2 client" section but without luck.

So I kept on reading and discovered, that I might need Hydra as a complement. However, Hydra does not seem to exist "as a Service" and I don't want to operate infrastructure myself, even if it is all simple and all docker.

Then I learned in a PR here, that Kratos/Hydra have been integrated late October 2022. However, I am not sure whether that is already reflected in the aaS-offering of Ory.

So here we are, trying to solve a super basic use case. If someone can point me to where I am lost in my thinking process, let me know :)

[vinckr]

Hello @star26bsd
Thanks for reaching out!
I am at the moment working on a guide how to do this, maybe we can figure it out together.
I am using this plugin: Ory Hydra OAuth & OpenID connect Single Sign-On (SSO).

You can find the endpoints that you need in the API documentation: https://www.ory.sh/docs/reference/api

So if your projects API endpoint is for example https://{project}.projects.oryapis.com you can use for the Access Token Endpoint https://{project}.projects.oryapis.com/oauth2/token
and for the Authorization Endpoint https://{project}.projects.oryapis.com/oauth2/auth.
You also have to create an OAuth2 Client for the client ID and secret.
I am currently stuck a few steps after that, feel free to DM me on the Ory Slack, we should be able to figure it out :)