Joomla SAML Handbook

This tab provides you the following features:

1. 1. Auto Redirect the user to IDP (Redirect to IDP if user not logged in)
      • This feature will restrict the site to only logged in users, this will redirect the users to IDP if logged in session is not found. This feature can be used to protect the site. Through this, users who are trying to access the site but are not logged in will be redirected to the IDP for authentication.
      • You can also restrict the Auto Redirect to IdP for particular URL.

• Force Authentication
  • By enabling this feature, you can force the users to provide their credentials on IdP each time they attempt to login. This feature can be used wherever there are multiple users working on a device. It might happen that a user attempts to login by some other user’s credentials. This feature will force every time, to first provide the credentials on IDP for authentication and then allows to login.
• Enable Backend Login for Super Users during Single Sign On
  • By enabling this feature, you can directly login into your Joomla sites backend panel (Admin Panel) if and only if the role of the user coming from IdP is either Admin or Super User.
  • But in some cases if you have restricted your Admin URL by using some security extensions then, in that case, you can add your Admin URL in the Custom Admin URL textfield.

• IP based restriction for auto-redirect
  • If you want to restrict particular IPs to redirect to IdP then you can just enable this checkbox and add the IP in the text area.
  • E.g. If you have entered 192.x.x.xxx IP in that text area then the corresponding user of this IP won’t be redirect to IdP for authentication. Also, you can enter multiple IP addresses by semicolon (;) separated