ClicData SAML Single Sign-On (SSO) Integration with Drupal as IdP

Drupal can be set as a centralized identity provider or an authentication source for the users across other applications via Single Sign-On (SSO). This document will walk you through the steps of integrating Drupal as SAML 2.0 IdP and ClicData as Service Provider (SP) using the miniOrange SAML IDP module. This will allow you to manage users and their permissions in a place and at the same time the users can access multiple applications with single credentials. The module is compatible with Drupal 7, Drupal 8, Drupal 9, and Drupal 10.

Note: You will require a Premium version of the module to configure the Nextcloud as SP and Drupal as IDP.

Download Drupal SAML IdP Metadata:

• After installing the module on your Drupal site, in the Administration menu → navigate to Configuration → People → Drupal SAML IDP Configuration. (/admin/config/people/miniorange_saml_idp/idp_setup)

• Under the IDP Metadata tab, click on the Download Metadata button. Open it on the notepad and copy the IdP information. Keep it handy. (This information is required to configure ClicData as SAML SP.)

Configure SAML SSO Application in ClicData:

• Login to your ClicData account as an Administrator.
• From left-top corner, click on the menu button.
• Under the Account section, click on Account Settings option.

• In the Account Settings tab, click on Single Sign-On.

• Enable Single Sign-On by sliding a button and select SAML 2.0 as the Identity Provider type.

• Click on the Import Identity Provider Metadata button and upload the IDP metadata file downloaded from the IDP Metadata tab of the SAML IDP module.
• In the User Attributes section, fill in the fields as you configured them in the plugin section.

  E-mail	Mail
  First Name	givenName
  Last Name	Surname
  Can sign in?	Yes


• Keep the Default role of new users to Viewers.

Configuring Drupal as Identity Provider:

• Click on the Download Metadata button on the ClicData site.
• Navigate to the Identity Provider Setup tab of the Drupal SAML IDP module.
• Go to the Upload SP Metadata section and upload the metadata file downloaded from ClicData.

• Click on the Upload button
• Enable the checkbox labeled Assertion Signed.
• Scroll down and click on the Save Configuration button.

Attribute Mapping

• Go to the Mapping tab of the Drupal SAML IDP module
• Click on the Edit button of the respective SP.
• Configure the below attributes and click on the Save Configuration button.

Test Connection between ClicData and Drupal:

• Click on validate at the bottom, it will redirect you to the WordPress page where user have to enter the credentials and then it will redirect back to the ClicData.

  Note: For the validation to work, the current user logged in ClicData must be present in the Drupal user directory of people or in one of their integrations with the exact same email address. On authentication, the Validation should turn to green.

You have successfully configured the SAML SSO between ClicData as SAML SP and Drupal as SAML IDP.