Multisite backend site switch with custom login URL

  • Resolved Andy Reutimann

    (@andyreutimann)


    1 year, 9 months ago

    Currently we‘re using AIOS custom login URL‘s for every website we‘re creating (agency). In combination with Multisites there is however a problem when switching from one backend to the other while not yet beeing logged in to the other.

    Even though AIOS knows (access to respective settings from within database) and user is logged in to one site, a switch using the admin menu bar to the second site does lead to ../wp-admin instead of e.g. ../customlogin.

    Important: of course there should not be a redirect as this may cause brut force hackers to find out custom URL. We just address the admin menu bar for switching sites.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @andyreutimann

    Do it means you have one multisite installation and once you are logged in as Super admin, You can see the the sites list and there when you click on dashboard link it goes tow wp-admin which seems problem ?

    Dahsboard should be linked to wp-admin and if you are logged in as super admin you can access the other site dashboard. Below is screen shot of two multisite both have renamed login page.

    https://snipboard.io/UDeilT.jpg

    Regards

    Thread Starter Andy Reutimann

    (@andyreutimann)

    Hi @hjogiupdraftplus

    I did a quick screen recording to show you how our customers try to access their ?other sites? from within multisite admin:
    https://mkab.ch/20230612_AIOS.mov

    Once the user is logged in to every single site, it works (of course). But: as the user is already logged in to one but not to the other site(s), the dashboard links don’t work.

    So, my feature request is: as admin is authenticated area, change dashboard link (herein) to the renamed login page.

    Therefore if a user is not (yet) logged in, it works as well. And: as this is not public nor a redirect, it also does not cause any security vulnerability.

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @andyreutimann

    As per video Dashboard link redirects wp-admin not wp-login.php

    Here if that user have access to the site then only he can see that as site But seems strange he needs to login again as he is site user should be able to login.

    Do you have salt postfix on ? WP security > Miscellaneous > Salt tab – Enable salt postfix on ? If yes try disable that.

    Also do you have latest version of AIOS 5.1.9 please cross check.

    Thread Starter Andy Reutimann

    (@andyreutimann)

    Yes, clicking on a sub-sites Dashboard from Admin panel leads me to domain.tld/wp-admin/

    No, Salt is disabled.
    Yes, I do run AIOS 5.1.9

    I’m using different URL’s for subsites, no sub domains. (maybe this helps?)

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @andyreutimann

    Ok, Here you have different domain for subsites other than mainsite. Do you proper cookies setting for that ? Please cross check below link.

    https://wordpress.stackexchange.com/questions/259839/cookies-in-multisite-network-where-sites-have-their-own-domain-name

    Here logged user is user of subsite then only he has access to the “Dashboard” and it is /wp-admin link is also correct. just why he can not access main site might be due to not considered logged in due to cookie issue.

    I will also try replicate the issue and get back to you.

    Regards

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @andyreutimann

    Sorry for late reply I can replicate the issue, I also tried settings cookie domain etc but still direct auto login to another domain seems not working.

    I would consider it WordPress issue than AIOS it should do auto login to another domain as the Dashboard link is wp-admin and not wp-login.php . I have created internal ticket for this and get back to you.

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @andyreutimann

    Can you please install the plugin Multisite Multidomain Single Sign On it should solve the issue. I can access subsite dashboard having another domain using it.

    https://www.ads-software.com/plugins/multisite-multidomain-single-sign-on/

    Regards

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Multisite backend site switch with custom login URL’ is closed to new replies.