WordPress + Office 365

This setting provides mappings between Azure AD Security Groups on the one hand and WordPress roles on the other hand.

Please note that the plugin by default will not update the WordPress role assignment of any existing WordPress user that is an administrator.

Also, when configured, this setting will override the Default role main site setting.

To create a mapping you must select first the WordPress role that you intend to create a mapping for from the drop down list and then you add the ID of the Azure Group that you want to map to the selected WordPress role.

Important After you entered a new mapping on a line you must click “+” to add it. Also when you are entering just one line.

The ID of an Office Group or Azure AD Security Group can be found in your Azure Portal as follows:

• Click Azure Active Directory
• Select Groups followed by All Groups
• Click a group and copy the Object ID

By default the information returned from Microsoft when a user signs in does not contain any information about the Office 365 and / or Azure AD Security / Distribution groups. Change your Azure AD registered app’s manifest as follows to retrieve a list of all the groups a user is a member of as part of the information sent by Microsoft upon signin in.

• Navigate to your Azure Portal
• Click Azure Active Directory
• Select Registered applications followed by View all applications
• Select your registered application
• Click Manifest and edit as follows:

{
...
"groupMembershipClaims": "SecurityGroup",
...

Alternatively, you could also type All to include Office 365 groups. However, this may lead to rather large ID tokens being sent when a user signs into your website and that user being a member of many Office 365 groups.

Pleas note Last but not least, please note that you can reference nested Azure AD groups here. The ID token received from Microsoft will contain all group IDs of all groups the user is a member of and all groupd IDs of all groups those groups are member of etc. In other words, Azure AD will resolve the nested group hierarchy for your convenience.