Dorvis Auth

Hỏi đáp

Where do I get my Client ID?

You must contact Dorvis support or use the demo credentials provided in the documentation.

How do I move an existing site to Dorvis sign-in?

Turn off Create accounts automatically. Existing users sign in with their password, open their profile and click Link Dorvis identity. The Users list shows who has linked. Once everyone has, turn on Disable password sign-in.

Can I link accounts in bulk instead of asking everyone to click?

Turn on Match accounts by personal code, then set the dorvis_personal_code user meta field on each account to that person’s code, digits only with no dashes or spaces. Those users can sign in with Dorvis straight away. The Users list shows them as Pending until they first sign in, so a mistyped code is visible before anyone is locked out.

Accounts that were already linked before the setting was turned on keep working, and their personal code is filled in the next time they sign in.

dorvis_personal_code is the only user meta field meant to be written by hand. Setting `dorvis_sub` directly also links an account, but the plugin then treats it as one it created and overwrites its name and public URL slug from Dorvis on the next sign-in.

What if Dorvis is unreachable and password sign-in is disabled?

Define DORVIS_AUTH_ALLOW_PASSWORD_LOGIN as true in wp-config.php.

Does this work alongside a two-factor authentication plugin?

No. Signing in with Dorvis establishes the WordPress session directly, so plugins that add a second factor to the username and password form are not part of that path. The second factor is whatever the Dorvis identity provider asks for.

What claims are mapped?

given_name and family_name become the user’s name fields and display name, and the name also becomes the public URL slug. person_code is stored as the dorvis_personal_code user meta field; it is never used as the username.

This mapping is applied on every sign-in to accounts the plugin created. An account that already existed on the site when it was linked keeps the name and public URL slug the site gave it.