WeChat Work Auth

MrDoc Professional supports **Scan Code Login** integration and **Direct Login Configuration** for WeCom (WeChat Work) "Internal Enterprise Applications".

## I. Creating a WeCom Application

Log in to the WeCom management backend, navigate to the "Application Management" page.

![](/media/202511/e114690feae84c179d2ff6dc0aba381f9120.png)

Scroll to the bottom of the page, and under the "Self-built" category, click "Create Application":

![](/media/202511/d4d825d2663c4d7287bdaa4238de63292621.png)

Fill in the required information as prompted:

![](/media/202511/4286c2f7c04c447685110c4d8272cc4d3181.png)

After the application is created, you will be directed to the application management page:

![](/media/202511/e5c46057716a4039b240588d81984dc63725.png)

Copy the "AgentId" and "Secret" information for later configuration use.

## II. Configuring the WeCom Application

### Trusted Domain Verification

After downloading the domain verification file, you can configure domain verification using Nginx or configure it within MrDoc. Refer to the documentation: [https://doc.mrdoc.pro/doc/3990/#h2-configuring-text-file-access](https://doc.mrdoc.pro/doc/3990/#h2-configuring-text-file-access)

### Application Homepage Configuration

Click to set the "Application Homepage":

![](/media/202511/451ae99f88d24af0b28cb4827fbf5ea41510.png)

Enter the webpage URL as follows:

```
https://open.weixin.qq.com/connect/oauth2/authorize?appid={CorpID}&redirect_uri={Domain}/oauth/wechatwork_callback/&response_type=code&scope=snsapi_base&state=STATE#wechat_redirect
```

![](/media/202511/d08b660cd1bd49bba2c9b49bb0edb6686259.png)

For example, if the CorpID is `123456` and the domain is `http://mrdoc.com`, the application homepage address would be as follows:

```
https://open.weixin.qq.com/connect/oauth2/authorize?appid=123456&redirect_uri=http://mrdoc.com/oauth/wechatwork_callback/&response_type=code&scope=snsapi_base&state=STATE#wechat_redirect
```

### Enterprise Trusted IP Configuration

Configure the enterprise trusted IP as your server's IP address.

![](http://file.mrdoc.pro/mrdoc-oss/img/2023/01/14/2023-01-14_101005_4555290.04902892920743951.png)

### Web Authorization and JS-SDK Configuration

Under "Web Authorization and JS-SDK", click "Set Trusted Domain".

![](/media/202511/d015886d25c44208b235f2c9154e51fa2486.png)

Enter your MrDoc domain address:

![](/media/202511/b4653eef54f144359982de692cbe49549309.png)

### WeCom Authorization Login Configuration

Scroll to the bottom of the page, and under "Developer Interfaces", configure "WeCom Authorization Login":

![](/media/202511/374b727c0369463bab312e09957363679653.png)

On the settings page, under "Web Pages", click Edit and enter the domain name or IP address where your MrDoc Professional application is deployed.

![](/media/202511/d15bc0737f2240c399917dd518cfb0141315.png)

Click Save.

## III. Configuring MrDoc

Log in to MrDoc Professional as an administrator, go to the "Site Management" section, and navigate to the "Third-party Login" page:

![](/media/202511/1eda3a2a5ab84e118b006177eff6a5bd6149.png)

In the "WeCom" tab, select "Enable", and fill in the "AgentId" and "Secret" from the WeCom application into the corresponding form fields.

As for the "CorpID", you need to obtain it from the "My Enterprise" page in the WeCom management backend:

![](/media/202511/439948f11bb443db83926c21b72fac133543.png)

Scroll to the bottom of the enterprise information page to find the "CorpID".

![](/media/202511/7df8b15338344ca39fe6b7b77a128e071925.png)

Copy and paste it into the corresponding field in the MrDoc Professional configuration form.

Finally, click Save to complete the configuration of WeCom Scan Code Login for MrDoc Professional.

## IV. Scan Code Login

After enabling WeCom Scan Code Login, the WeCom icon will appear on the MrDoc Professional login page.

![](/media/202511/fca699c609fa4e788554b01aac3e57396474.png)

Clicking the WeCom icon will redirect to the WeCom scan code interface. After scanning the QR code with your phone and confirming login, authentication will be successful.

## V. Direct Login

After completing the above configuration, clicking the created application from the application list in the WeCom Workbench allows direct login access to MrDoc without re-authentication.

## VI. Other Configurations

### Syncing WeCom Members to MrDoc

You can batch sync WeCom members to MrDoc within the configuration page for WeCom authentication integration.

Currently, the following three synchronization methods are supported:

- Import WeCom users as MrDoc users.
- Import WeCom users as MrDoc users, import the departments the WeCom users belong to as MrDoc user groups, and add the users to these groups.
- Clean up WeCom users within MrDoc; users not present in WeCom will be set to "Disabled" status.

### Binding WeCom Account to MrDoc Account

If you log in directly via WeCom, a new account will be created within the MrDoc account system. Alternatively, you can bind your WeCom account to an existing MrDoc account.

Operation method: Go to the Personal Center page, click "Personal Management" menu, select "Personal Settings", switch to the "Third-party Accounts" tab, click "Bind WeCom Account", and proceed with the configuration.