Search Results :

×

Magento OAuth / OpenID Connect Single Sign-On (Magento SSO)

Adobe Hyvä GraphQL
Magento OAuth Authentication Single Sign On – Magento SSO (OAuth 2.0) extension allows users residing at OAuth 2.0 capable OAuth Provider to login to your Magento site. OAuth Client extension works with any OAuth provider/server like Azure, Okta, AWS Cognito, Auth0, Keycloak, Google, Facebook, Instagram, Discord, Salesforce, Slack, Strava, Eve Online, or other custom OAuth or OpenID Connect providers.
Magento OAuth / OpenID Connect SSO

What is Magento OAuth / OpenID Connect Single Sign-On (SSO)?

Magento OAuth / OpenID Connect (OIDC) Single Sign-On (SSO) enables users to log in to their Magento store using existing accounts from an external Identity Provider (IdP), such as Keycloak, Microsoft Entra ID, Okta, or Google. It eliminates the need for separate login credentials and provides a smooth authentication experience.
OAuth 2.0 enables secure authorization, while OpenID Connect verifies user identity. This integration simplifies user access, enhances security, and centralizes authentication management. It is ideal for businesses looking to connect Magento with their existing identity systems and provide convenient, secure access for customers, employees, and administrators.

What You Can Do with the Magento OAuth / OIDC Single Sign-On

Magento OAuth / OIDC Single Sign-On (SSO)

  • Auto Create Users

    Auto Create Users

    Auto-create User in Magento after doing SSO with the user credentials if the user is not already present in Magento User list.

    Magento OAuth / OIDC Single Sign-On (SSO) - Auto Create Users
  • Admin/Customer SSO (Single Sign On)

    Admin/Customer SSO (Single Sign-On)

    Add Single Sign-On button to the Backend login page (Admin login page) and Frontend login page (Custom login page) for Magento 2.

    Magento OAuth / OIDC Single Sign-On (SSO) - Admin/Customer SSO
  • Attribute Mapping

    Attribute Mapping

    User can map Username, FirstName, LastName, Email, Group Name and also map custom attribute as per requirement.

    Magento OAuth / OIDC Single Sign-On (SSO) - Attribute Mapping
  • Group & Role Mapping

    Group & Role Mapping

    User are assigned a specific group and role based on groups/roles received in OAuth Provider response with configured mapping.

    Magento OAuth / OIDC Single Sign-On (SSO) - Group & Role Mapping
  • Multiple Stores / Sites

    Multiple Stores / Sites

    Configuration of multiple stores / Sites to authenticate the different group of users with different stores/sites.

    Magento OAuth / OIDC Single Sign-On (SSO) - Multiple Stores / Sites
  • Supports Community & Adobe Commerce

    Supports Community & Adobe Commerce

    Supports Community Edition and Adobe Commerce versions, including the latest 2.4.8 release, as well as Headless Magento setups.

    Magento OAuth / OIDC Single Sign-On (SSO) - Supports Community & Adobe Commerce
  • Customization

    Customization

    Need a custom feature and cannot find? No worries, we can add custom feature in extension for you depending upon requirement.

    Magento OAuth / OIDC Single Sign-On (SSO) - Customization
Magento OAuth / OIDC Single Sign-On (SSO) - Auto Create Users Magento OAuth / OIDC Single Sign-On (SSO) - Admin/Customer SSO (Single Sign On) Magento OAuth / OIDC Single Sign-On (SSO) - Attribute Mapping Magento OAuth / OIDC Single Sign-On (SSO) - Group & Role Mapping Magento OAuth / OIDC Single Sign-On (SSO) - Multiple Stores / Sites Magento OAuth / OIDC Single Sign-On (SSO) - Supports Community & Adobe Commerce Magento OAuth / OIDC Single Sign-On (SSO) - Customization

Try Magento SSO Solution for Free on Our Sandbox or Your Own Store

Explore the miniOrange Magento 2/Adobe Commerce SSO extension before you buy. Try it on our ready-to-use sandbox with no setup required, or request a free trial to test SSO for admin and customer logins in your own store.

How to setup SSO on your Magento 2 Store?

Follow these simple steps to enable OAuth SSO for your Magento admin and customer accounts.

Step 1

Step 01

Install miniOrange Magento SSO Solution

Download and install the miniOrange SSO extension on your Magento store from Adobe Commerce Marketplace.

Step 2

Step 02

Select the protocol and the IdP / OAuth Provider you want to set up

To set up Single Sign-On in Magento 2 with your IDP (Microsoft Entra ID, Okta, Auth0, Keycloak), select the protocol type (SAML,OAuth&OpenID or JWT) from the options.

Step 3

Step 03

Share configure settings for your Magento OAuth Client and OAuth Provider (IdP)

Exchange the required OAuth details, such as Client ID, Client Secret, and Redirect URI, between Magento and your OAuth provider to establish a secure connection and enable SSO for your store.

Step 4

Step 04

Test Connection! You have completed Magento SSO configuration!

Login as a test user via the SSO to confirm users are authenticated, auto-created, and assigned to the right role or group.

Discover our wide range of integrations

You can enable Single Sign-On in your Magento site using our SSO extension and connect it to any Identity Provider.
See our integration guides with the most popular Identity Providers.

Pricing Plans

Community Edition Adobe Commerce

FREE

$0


Customer (Frontend) SSO
Auto Create User (Upto 10 users)
Option to Add SSO Login Button
See Adobe Commerce Pricing

STANDARD

$349/Year


Auto Create User (Unlimited)
Basic Attribute Mapping (FirstName, Email)
Auto redirect to IDP from login page
See Adobe Commerce Pricing

PREMIUM Most Popular

$449/Year


Admin (Backend) & Customer (Frontend) SSO
Custom Attribute Mapping
Role/Group Mapping
Support for Multi-Store
See Adobe Commerce Pricing

ENTERPRISE

$649/Year


Multiple Site Supported (2 subsites)*
Multiple OAuth Provider Supported (2 Providers)*
*[Additional Charges applicable from 3rd Provider or Subsite, whichever is higher]
See Adobe Commerce Pricing

FREE

$0


Customer (Frontend) SSO
Auto Create User (Upto 10 users)
Option to Add SSO Login Button
See Community Edition Pricing

STANDARD

$399/Year


Auto Create User (Unlimited)
Basic Attribute Mapping (FirstName, Email)
Auto redirect to IDP from login page
See Community Edition Pricing

PREMIUM Most Popular

$499/Year


Admin (Backend) & Customer (Frontend) SSO
Custom Attribute Mapping
Role/Group Mapping
Support for Multi-Store
See Community Edition Pricing

ENTERPRISE

$699/Year


B2B Environment Compatible
Multiple Site Supported (2 subsites)*
Multiple OAuth Provider Supported (2 Providers)*
*[Additional Charges applicable from 3rd Provider or Subsite, whichever is higher]
See Community Edition Pricing
View Feature Comparison  
Hide Feature Comparison  
View Feature Comparison  
Hide Feature Comparison  
Free
Standard
Premium
Enterprise
Customer (Frontend) SSO
Auto Create User Restricted Unlimited Unlimited Unlimited
Options to select SAML Request binding type
Option to Add SSO Login Button
Admin (Backend) SSO
SAML Single Logout
Auto-Redirect to IDP from all pages
Default Attribute Mapping
Advanced Attribute Mapping
Custom Attribute Mapping
Role/Group Mapping
Supports SAML Messages signed and encrypted
Support for Multi-Store
Multiple Site Supported (2 subsites)*
Multiple Identity Provider (IDP) Supported (2 IDP's)*
*[Additional Charges applicable from 3rd IDP or Subsite, whichever is higher]
Free
Standard
Premium
Enterprise
Customer (Frontend) SSO
Auto Create User Restricted Unlimited Unlimited Unlimited
Options to select SAML Request binding type
Option to Add SSO Login Button
Admin (Backend) SSO
SAML Single Logout
Auto-Redirect to IDP from all pages
Default Attribute Mapping
Advanced Attribute Mapping
Custom Attribute Mapping
Role/Group Mapping
Supports SAML Messages signed and encrypted
Support for Multi-Store
B2B Environment Compatible
Multiple Site Supported (2 subsites)*
Multiple Identity Provider (IDP) Supported (2 IDP's)*
*[Additional Charges applicable from 3rd IDP or Subsite, whichever is higher]

Popular Usecases

Secure application access with Single Sign-On (SSO) to enable smooth authentication across connected applications.

Magento OAuth SSO - B2B SSO for Magento Multi-Site

B2B SSO for Magento Multi-Site

Enterprise B2B eCommerce platforms operating multiple Magento websites, stores, regions, and languages often face complex authentication challenges. A robust B2B Single Sign-On (SSO) solution was implemented using the miniOrange SSO Extension to centralize authentication via a corporate Identity Provider. Supporting both IdP- and SP-initiated flows, it works seamlessly in multi-site and multi-store environments with secure company-level attribute mapping. The solution successfully scaled from POC to full commercial deployment, with readiness for additional subsites.


Auth0 SSO for Multisite Headless Adobe Commerce


Secure Magento Mobile Authentication

Frequently Asked Questions

Answers to Common Queries About Our Magento OAuth / OIDC Single Sign-On (SSO) Extension

Which IdP’s are supported by miniOrange Magento SSO extension?

miniOrange Magento SSO extension supports all the IdP’s including Azure AD (Entra ID), Okta, Keycloak, Auth0 and more. Yes, the extension also supports Single Sign-On ( SSO) with any SSO-compliant IdP, including any custom Identity Providers.

We have multiple store views / sub-domains / multiple IdP’s. Does the extension support that?

Yes, miniOrange SSO extension for Magento 2 (Adobe Commerce) supports SSO for multiple stores, subsites (multiple-sites within the same Magento installation) and also supports SSO with multiple IdP’s.

Does it support backend/admin login via SSO, or only customer / frontend users?

Magento 2 Single Sign-On extension supports SSO for both admin (backend) and customer (frontend) users.

Does the extension store or process any user data?

No, Magento 2 OAuth / OIDC SSO extension does not store or process any data received from your Identity Provider (IdP). All data remains securely on your premise.

Can we map attributes received from IdP to Magento? Also, can IdP roles/groups be mapped?

Yes, you can easily map attributes received from the IdP into Magento, as well as roles/groups from the IdP to Magento SSO customer groups or admin roles using our Magento 2 SSO extension.

Does Magento SSO extension support Single Logout (SLO)?

Yes, our SSO extension for Magento 2 supports Single Logout (SLO).

Will our existing customers still be able to login with username/password, or will SSO enforce all?

Yes, you can choose to allow users to log in using the default username/password while also enabling Single Sign-On (SSO).

Real-time user sync happens automatically while using the SSO extension?

Real-time, two-way user synchronization (from IdP to Magento and vice versa) can be easily achieved using our User Sync and Provisioning extension.

What is your End User License Agreement (EULA)?

You can check our End User License Agreement (EULA) from here.

Are you GDPR compliant?

Yes, we are fully GDPR compliant. You can click here to view the complete details of our GDPR compliance.

See What Our Customers Are Saying

Unbiased Reviews That Speak for Themselves

Need Help with Magento SSO? Let's Connect

Magento SSO - Contact miniOrange Support

 Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again

Hello there!

Need Help? We are right here!

support