SAML Single Sign-On (SSO) in Netsuite (SP) | Magento – Netsuite SSO Login

Get Free Trial

Netsuite SAML Single Sign-On (SSO) with Magento as SAML IdP . Magento SAML IdP extenstion gives you the ability to use your Magento credentials to login into Netsuite (SP). Here we will go through a step-by-step guide to configure SSO between Netsuite as SP (Service Provider) and Magento as IDP (Identity Provider).

Pre-requisites: Download and Installation

Installation using Composer:

• Purchase the miniOrange SAML IDP Single Sign-On extension from magento marketplace.
• Go to My profile -> My Purchases
• Please ensure you are using correct access keys (My Profile - Access Keys)
• Paste the access keys in your auth.json file inside your project
• Use the below command to add the extension to your project.

  "composer require {module_name}:{version}"

• You can see the module name and list of versions in the selector below the extension module name.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Manual Installation:

• Download the miniOrange SAML IDP Single Sign-On extension.
• Unzip all contents of the zip inside the MiniOrange/IDPSaml directory.

{Root Directory of Magento} app code MiniOrange IDPSaml

• Run the following commands on command prompt to enable the extension

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Steps to configure Netsuite SAML Single Sign-on ( SSO ) Login into Magento 2

1. Configure Netsuite as Service Provider

• Sign on to NetSuite with your user credentials.
• Go to Setup > Company > Enable Features :

• Select SuiteCloud on the Enable Features menu :

• Scroll down to the Manage Authentication section.
• Check SAML SINGLE SIGN-ON :

• On the top menu, select Setup > Users/Roles, then click Manage Roles :

• The Manage Roles section that contains a list of all the roles assigned in your organization opens. Select Edit for a role for which you want to enable SAML:

• Scroll down to the Permissions section, then click Edit :

• Select Setup :

• Select the dropdown icon to display the list above the empty box. Select SAML Single Sign-on, then select Add :

• Select Set Up SAML Single Sign-on, and select Add again :

• You will see both selections listed with the level Full :

• Select Save to return to the Manage Roles section.
• On the main menu at the top of the page select Setup > Integration > SAML Single Sign-on :

• The SAML Setup page opens. Copy and paste the LOGOUT LANDING PAGE. Select UPLOAD IDP METADATA FILE, then select Choose File to locate and upload the metadata file. (You can download metadata file from the Magento extension)

2. Configure Magento as Identity Provider

• In the miniOrage SAML Identity Provider extension, go to Service Provider settings tab of the extension.
• Provide the required settings (i.e. SP Entity ID/Issuer, ACS URL) from your Service Provider Netsuite and click on Save button to save your configuration.


Note: The Relaystate URL is mandatory if you want to use Identity Provider (IDP)/Magento initiated flow.

3. Attribute Mapping

• In the Magento IDP extension, navigate to the Attribute Mapping tab.
• In the User Attributes section, enter the following information and click on Save .
• You can also add more attributes by clicking on + sign to add attributes.

Name	User Meta Data
username	user_login
displayName	display_name
email	user_email

4. SSO Testing

• Open a new browser or private incognito window and enter your Netsuite URL, which will redirect you to the Magento login screen.
• Enter your Magento credentials and click the log in button.
• If you are redirected to your Netsuite start page and successfully logged in, your configuration is correct.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Magento SAML Single Sign-On (SSO)
• Magento OAuth Client Single Sign-On (SSO)
• Frequently Asked Questions (FAQs)