Wp_set_auth_cookie whitelisting for miniorange plugin

  • Resolved christina1mehran

    (@christina1mehran)


    9 months, 1 week ago

    I’m facing a critical issue with my multisite WordPress setup.

    My site employs Miniorange for SAML SSO integration with OKTA. Recently, excessive binlog creation filled up the drive space, leading to the app going down (This binlog is used to copy the data over to a replica database)

    Looking at the db logs , I can see there are repetitive requests to update mo_saml_session_index and mo_saml_request, which might be the reason why binlogs are getting full.

    Miniorange helpdesk suspects wordpress blocking miniorange from setting wordpress_logged_in cookie, is causing SAML requests to loop endlessly.

    But the issue started happening all of a sudden.

    How and where can I whitelist the Miniorange SSO plugin to use wp_set_auth_cookie in a self-hosted environment? (Wp site is hosted on 3 linux server, we are using nginx. Database is stored accross two other separate dbs)

    Any insights on preventing SAML requests from going into loops?

    The wordpress site is customized, I cannot directly modify (install or update plugins) Will have to do that by deployment.

Viewing 1 replies (of 1 total)
  • Plugin Support anukasha

    (@anukasha)

    Hi Christina,

    Thanks for reaching out to us.

    As discussed over the Helpdesk Ticket, this issue was introduced by a conflict with an older version of the “Content Aware Sidebars” plugin.

    Updating the Content Aware Sidebars plugin seems to have resolved the issue for you. We recommend keeping plugins updated to avoid any such issues in the future.

    Feel free to reach out to us if you require any further?assistance.

    Thanks,
    Anukasha

Viewing 1 replies (of 1 total)
  • The topic ‘Wp_set_auth_cookie whitelisting for miniorange plugin’ is closed to new replies.

Tags