Manage External Authentications in WHM

Manage External Authentications in WHM


The Manage External Authentications interface allows you to manage your server’s OpenID Connect-compliant identity providers. Your users can log in to cPanel, WHM, or Webmail through these providers.


  • You can link one or more external accounts to one or more cPanel accounts, WHM accounts, or Webmail accounts.
  • For external accounts with two-factor authentication enabled, you must authenticate through that identity provider and through any two-factor authentication that you configure on your server.

Configure and enable authentication method

To add an authentication method for a cPanel service, perform the following steps:

  1. Click the Configure tab.
  2. In the desired identity provider’s row, click Configure. A new interface will appear.
  3. Enter the identity provider’s configuration settings in the appropriate text boxes.
    • Enter your desired colors for the Button color and Button text color text boxes in hexadecimal color format without the number sign symbol (#). For example, ff0000 represents the color red.
    • Enter a Base64-encoded image in the Button icon text box, and then enter the image format for that button icon.
    • Most OpenID Connect-compliant identity providers require Client ID,Client Secret, and entries.
  4. Select the To ensure that the system works correctly, confirm that you have used the above URLs when you configure the provider. checkbox.
  5. Click Save. The list of identity providers will appear.
  6. Click the appropriate switch to toggle the identity provider for a service from Disabled to Enabled.

To disable an identity provider for a service, click the appropriate switch to toggle the provider from Enabled to Disabled.


  • If you remove an identity provider, the system will revoke access for all credentials that require that method.
  • The system will automatically disable missing or misconfigured identity provider modules.
  • If you change your server’s hostname, you must update the Redirect URI settings in the configuration settings at the identity provider’s site to reflect the new hostname.


When you perform a cPanel Update (upcp), Your server will automatically configure the cPanelID External Authentication identity provider. It will also populate it with the necessary Client ID and Client Secret from the license server.

Manage credentials

The Credentials section of the interface lists cPanel services accounts and their external authentication credentials.

To unlink an account from an external authentication provider, perform the following steps:

  1. Click the Manage Users tab.
  2. Click Manage in the appropriate row for that user and service.
  3. Click Unlink next to the appropriate account.
  4. Click Unlink to confirm that you wish to revoke the account.

Was this article helpful?

Related Articles

Leave A Comment?

You must be logged in to post a comment.