https://lhero.org/portfolio/lh-membership/ Helping Organisations get organised! Mon, 12 Oct 2026 12:16:05 +0000 hourly 1 https://lhero.org/portfolio/lh-membership/#comment-1537235 Mon, 12 Oct 2026 12:16:05 +0000 https://lhero.org/?post_type=lh-portfolio&p=145740#comment-1537235 Single sign-on no longer bounces crawlers and other automated browsers. On a logged-out subsite visit, the SSO script now skips both the bounce to the main site and the cross-site link rewriting when the browser reports navigator.webdriver or its user agent matches a skip pattern (default: bot, crawl, spider, slurp, headless, lighthouse, preview). Crawlers such as Bing’s renderer were being sent to the main site on every direct landing, which also made LH Beacon refuse their unload beacons as cross-origin. The pattern is filterable via lh_membership_sso_skip_ua_pattern. A real visitor whose user agent matches just does not get the automatic sign-in and can log in normally.

]]> https://lhero.org/portfolio/lh-membership/#comment-1536991 Sat, 10 Oct 2026 05:06:35 +0000 https://lhero.org/?post_type=lh-portfolio&p=145740#comment-1536991 Single sign-on to a subsite no longer triggers a Two Factor code prompt. The subsite reuses the main site’s existing, already-verified session, so Two Factor’s wp_login handler is suspended while the SSO callback fires wp_login. Other wp_login actions still run. Normal logins are still challenged.

]]>