Mixed Content error requested insecure script dm-sso-endpoint

We got the Domain Mapping Tool active on our multisite. But we get the following error message in the console:

“Mixed Content: The page at ‘https://mymappedsite.com/’ was loaded over HTTPS, but requested an insecure script ‘http://mymainsite.com/dm-sso-endpoint/XXXXXX/?dm_action=domainmap-check-login-status&domain=mymappedsite.com’. This request has been blocked; the content must be served over HTTPS.”

  • Adam Czajczyk
    • Support Gorilla

    Hello nnpro,

    I hope you’re well today and thank you for your question!

    This is related to “cross-domain auto-login” feature of Domain Mapping. I’m afraid it is a bug but our developers are already aware of it and are working on a fix.

    A workaround for now would be to disable the “Cross-Domain Auto-login” option in Domain Mapping settings, though the downside is that when going through dashboards of sub-sites under different domains, users would have to login separately to each dashboard.

    I have added your ticket to the report of theirs so we would be notified of any “hot patches” (when and if available) but also please keep the plugin up to date as the fix will most likely released as an update.

    Kind regards,


  • Braydan Willrath
    • Flash Drive

    Really wpmudev, the internet is moving to SSL at a rapid rate, Google is forcing sites to use SSL or be punished, its been 45 days and you guys still can’t dedicate a single developer for 15 minutes to fix this very simple problem?


    We all pay good money for your plugins, the least you could do is have them work properly. Shouldn’t be that hard.

    Especially on something as important as Multisite Domain Mapping.

    • Predrag Dubajic
      • Support

      Hi Braydan,

      Apologies for the delay on this one, our developers are working on multiple plugins and tasks at the same time and this one turned out to be quite strange because it doesn’t happen on all installations which is further affecting debug process.

      At the moment you can disable “Cross-Domain Auto-login” option as a workaround for this issue.

      Best regards,


    • Leonidas
      • Developer

      Hi there Braydan Willrath ,

      as Predrag mentioned, this issue caused us delays since it won’t be easily replicated in various WP installs. For example, when I replicated this bug in my test site, I noticed the following:

      If you select Force https for admin/login pages: On

      on the Domain Mapping settings in the main site, the Mixed Content error stopped appearing from anywhere in my test site. If the main site has a valid SSL, this is supposed to work, no matter if you disable the “Cross-Domain Auto-login” option or not. You have to make sure that http is not forced in front-end pages in the settings, as well.

      I understand that this didn’t actually work for nnpro , but it worked for multiple installations on our end with the latest version of DM and that’s why we asked for credentials for his site to debug a little further. But, if you yourself have the same issue, you can try the above and if it doesn’t solve your issue, you can open a new thread for us to take a look into your installation as well. That would be quite helpful for us to understand the bigger picture of this issue, as well.

      I hope I cleared a little bit more what the current situation is and of course am looking forwards for your further feedback :slight_smile:

      Best regards,


  • Sohag Ronjon Dey
    • Support

    Hello nnpro,

    Hope you are doing well.

    Hope the workaround of disabling “Cross-Domain Auto-login” option suggested by my colleague helped. For more investigation of the issue our developers will need your admin and ftp credentials .

    Could you please send us the credentials through our contact form ,


    Using this template:

    Subject: "Attn: Sohag"

    Login details WordPress (WP credentails of both the Multisite Network and also the Mapped Domain site)
    Site URL

    Login details FTP:
    Port (if necessary)
    Path (if there're more than one websites in the server, or in case there's in a non-default path like /public_html/)

    Select “I have a different question” for your topic – this and the subject line ensure that it gets assigned to me

    Please DO NOT post the credentials here as this is a public forum, also would you mind our devs doing some basic troubleshooting such as temporary deactivating all plugins?

    Please let me know



Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.