Set up Single
Sign-On (SSO) on your Joomla site via Nextcloud OAuth provider with the help of
Joomla OAuth & OpenID Connect plugin. Integrating Nextcloud Single Sign-On (SSO) into Joomla using OAuth 2.0
authentication protocol allows your users to securely login into your Joomla websites and applications by
authenticating with Nextcloud OAuth provider. The Nextcloud OAuth Joomla plugin also provides advanced
features such as, Auto create users,
Attribute Mapping, Group Mapping etc.
Visit our Joomla OAuth Client Plugin page to learn more about the features and Pricing plans we offer for the Joomla OAuth Single Sign-on (OAuth & OpenID connect) plugin.
Pre-requisites : Download
And Installation
Step 1: Install
Joomla OAuth Server Plugin
- Login into your Joomla site’s Administrator console.
- From left toggle menu, click on System, then under Install section click on
Extensions.
- Now click on Or Browse for file button to locate and install the plugin file downloaded
earlier.
- Installation of plugin is successful. Now click on Start Using miniOrange OAuth Server plugin.
- Under the Configure OAuth tab, click on the ADD button.
Steps to configure OAuth SSO
into Joomla
1. Configure
Callback/Redirect URL
- After selecting your OAuth provider, you will be redirected to the Step 1 [Redirect URL] tab.
Now copy the
Callback/Redirect URL which we will use to configure the OAuth Server, then
click on the Save & Next button.
- Sign in with an administrator account to your Nextcloud server.
- Open the menu in the top-right corner and select the Administrator Settings. On the next page,
select the Security in the "Administration" section on the left.
- At the bottom of the page you see the list of Registered clients, (which is empty initially).
Below "Add client", enter the name of your OAuth Client in the first field (Name). Note that
the name that you enter here will be displayed to your client users
- In the second field (Redirection URI), enter the URL of your OAuth Client which is copied from here.
- Click Add to save.
2. Configure Client ID and
Secret
- Afterwards, you will get Client Identifier and
Secret . The Client Identifier will be the Client ID and the
Secret
will be your Client Secret.
- Go to the Step 2 [Client ID & Secret] tab of the Joomla OAuth Client plugin, here paste the
Client ID,
Client
Secret and Tenant. Click on the
Save
Configuration button.
2.1.
Scope &
Endpoints
- Now you can connect OAuth client with NextCloud (OAuth Provider) and the following endpoints are:
Nextcloud Endpoints and Scope:
|
Authorization endpoint:
https://your-nextcloud-domain>/apps/oauth2/authorize
|
Access Token endpoint:
https://your-nextcloud-domain>/apps/oauth2/api/v1/token
|
Get user info endpoint:
https://your-nextcloud-domain>/ocs/v2.php/cloud/user?format=json
|
- Once you click on Test Configuration button, You will be able to see the attributes in the Test
Configuration output as follows.
Step 4: Configure
Attribute Mapping
- User Attribute Mapping is mandatory for enabling users to successfully login into Joomla. We will be setting up
user profile attributes for Joomla using below settings.
- Go to Step 3 [Attribute Mapping] tab and click on Test Configuration button.
- You will be able to see the attributes in the Test Configuration output as follows.
- Now go to the Step 3 [Attribute Mapping] tab and Select the attribute name for Email
and Username from dropdown.
Then click on Finish Configuration button.
Step 5: Setup Login/SSO URL
- Now go to Step 4 [SSO URL] tab, here copy the Login/SSO URL and add it to your
Site by following the given
steps.
- Now logout and go to your Joomla site's pages where you have added this link. You will see a login link where
you placed that button. Click on this button to perform SSO.
Related Articles
In this guide, you have successfully configured Joomla Nextcloud Single Sign-On (SSO) by configuring
Nextcloud as OAuth Provider and Joomla as OAuth Client using our Joomla
OAuth
Client plugin.This solution ensures that you are ready to roll out secure access to your Joomla site using
Nextcloud login credentials within minutes.
Additional
Resources
Mail us on joomlasupport@xecurify.com for
quick
guidance(via email/meeting) on your requirement and our team will help you to select the best suitable
solution/plan as per your requirement.