SAML Single Sign On (SSO) into Drupal using ADFS as IDP

Download Module

Drupal SAML ADFS SSO setup will allow your user to login to your Drupal site using their ADFS Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. Drupal module is compatible with all SAML Identity Providers. Here we will go through a guide to configure SAML SSO between Drupal and your Identity Provider. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.

You can refer the steps to configure ADFS with the Drupal SAML module

from the video or documentation given below

Step 1: Configuring ADFS as Identity Provider (IdP)

In ADFS, click on Add Relying Party Trust . Then click on Start .

In Select Data Source: Select Enter data about the relying party manually. Click Next .

In Specify Display name: Enter Display name . Click Next.
In Choose Profile : Select AD FS profile. Click Next.
In Configure Certificate: If you’re using a free Module, skip this step and click Next. If you’re using the premium Module, upload the certificate downloaded from the Module. Click Next.
In Configure URL: Check Enable Support for the SAML 2.0 Web SSO Protocol and enter the ACS URL from the Module in Relying Party SAML 2.0 SSO service URL field. Click Next.

Configure Identifiers: Enter the SP-Entity ID/Issuer URL from the Module in Relying Party Trust Identifier field. Click Add. Click Next

drupal saml sp relying party trust identifier

In Configure Multi-factor Authentication: Select I do not want to configure multi factor authentication settings for this relying party trust. Click Next.
In Choose Issuance Authorization Rules, select Permit all users to access this relying party. Click Next.
In Ready to Add Trusts, select click Next.

Check Open the Edit Claim Rules dialog and click close. Click Add rule and then select Send LDAP Attributes as Claims . Enter the following:

Claim rule name	Enter claim rule name(Any). For example: Attributes
Attribute Store	Active Directory
LDAP Attribute	E-Mail-Addresses
Outgoing Claim Type	Name ID

Click on Finish button.

Step 2: Configuring Drupal as Service Provider (SP)

In Drupal SAML Module, go to Service Provider Setup tab. There are two ways to configure the Module:

ADFS_sso By Uploading ADFS Metadata File :

Click on Upload IDP Metadata.
Upload metadata file and click on Upload.

ADFS_sso By ADFS Metadata URL :

Click on Upload IDP Metadata.
Enter Metadata URL and click on Fetch Metadata.
You can provide this metadata url https://<your_ADFS_domain>/federationmetadata/2007-06/federationmetadata.xml

If you want Single logout then follow these steps:
Navigate to Relying Party Trusts => Properties

Navigate to Endpoints => Add SAML

Select SAML Logout from Endpoint type dropdown.
Enter ACS URL in Trusted URL textfield and SAML Logout URL in Response URL textfield then click on OK button.

SAML Single Sign On (SSO) into Drupal using ADFS as IDP

You can refer the steps to configure ADFS with the Drupal SAML module

from the video or documentation given below

Step 1: Configuring ADFS as Identity Provider (IdP)

Step 2: Configuring Drupal as Service Provider (SP)

Additional Resources

Contents

STAY CONNECTED

Product

Solutions

Why miniorange

Company