Login into Keycloak Using Magento Credentials | Magento as IDP Single Sign-On (SSO) in Keycloak

Overview

Login into Keycloak using Magento user credentials. This guide will help you integrate Magento as an Identity Provider (IdP) and Keycloak as a Service Provider (SP) using the miniOrange Magento IDP (Identity Provider) Extension. Magento as IDP extenstion gives you the ability to use your Magento credentials to login into Keycloak (SP). Here we will go through a step-by-step guide to configure SSO between Keycloak as SP (Service Provider) and Magento as IDP (Identity Provider).

Download Pricing Plans Free Trial

Installation Steps

Configuration Steps

Step 1. Configuring Keycloak as OAuth Client

• Login into Keycloak Admin Console using your Keycloak credentials.
• Now, go to the Identity providers from the left panel and select OpenID Connect v1.0.



• Copy the Redirect URI to be used in your OAuth provider Configuration. Enter Login with Magento in the display name.

Step 2. Configure Magento as OAuth Server:

• In the miniOrange IDP extension, go to Applications tab.



• Select OAuth/OpenID from the applications menu.



• Search for Custom OAuth in the choose application searchbox and select the application.



• Enter the OAuth Client Name as Keycloak



• Paste the Redirect URL/Callback URL copied earlier in the Redirect URL field.



• Enter openid email profile in the scope field and save the changes.



• Navigate to the Applications tab and click on Edit settings for your application



• You would see that the Client ID and Client Secret are automatically generated. Copy them and keep them handy.



• Paste the Client ID and Client Secret in the Keycloak application.



• Navigate back to the Magento IDP extension and Click on Click Here link to get the Magento OAuth Endpoints



• Here you would receive all the Endpoints. Copy them as requried.



• Paste the Endpoints in the endpoints field in your Keycloak application

• Now, Navigate to the Mappers tab in Keycloak and click on Add Mapper button.

• Enter the Mapper Name and select Hardcoded Role in Mapper Type.

• Now click on Select Role button.

• Select the required role to that mapper as required and click on Assign button.

• You will now notice that the Login with Magento button appears on the Keycloak admin login page..

Step 3. Attribute Mapping (This is a Premium Feature)

• In the miniOrange Magento IDP extension, navigate to the Applications tab and click on Edit settings for your application.



• Add the attribute name you want to send to your OAuth Server and select the attribute from the dropdown menu.



• Click on Add Attribute and add the attribute name you want to send to your OAuth Client and select the attribute from the dropdown menu and click on Save Button to save changes.




You have successfully configured the SSO between Keycloak as OAuth Client and Magento as OAuth Server.




Related Articles



• What is SSO?
• What is SAML?
• Magento OAuth SSO
• Magento as OAuth Server



Get in Touch

Please reach out to us at magentosupport@xecurify.com, and our team will assist you with setting up the Magento IDP Extension. Our team will help you to select the best suitable solution/plan as per your requirement.