SAML Single Sign On (SSO) into Drupal using Azure AD as IDP
Drupal SAML Azure AD SSO setup will allow your user to login to your Drupal site using their Azure AD Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers ( IDP ). We provide Drupal SAML SP 2.0 Single Sign on (SSO) - SAML Service Provider module which is compatible with Drupal 7, Drupal 8 as well as Drupal 9. Here we will go through a guide to configure SAML SSO between Drupal and Azure AD Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.
If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module. If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) module.
Setup Video Azure AD as IDP
You can refer to the steps to Configure Azure AD with the Drupal SAML SSO from the Video or Documentation given below
Features and Pricing
Know more about Drupal SAML Single Sign On - Service Provider module from here.
Pre-requisites: Download
You can download the SAML Single Sign On - Service Provider module from here.
Module Handbook
This detailed Handbook for the SAML Single Sign On - Service Provider module, gives an in depth explanation of the features of the module. You can refer to the handbook at anytime - it is always available to you, either via This link, or directly from the module for quicker access.
1. Install Drupal SAML SP 2.0 Single Sign On (SSO) module
Composer require drupal/miniorange_saml
- Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Service Provider using the search box.
- Enable the module by checking the checkbox and click on install button.
- Configure the module at
{BaseURL}/admin/config/people/miniorange_saml/idp_setup - Download the module:
drush dl drupal/miniorange_saml
- Install the module:
drush en drupal/miniorange_saml
- Clear the cache:
drush cr
- Configure the module at
{BaseURL}/admin/config/people/miniorange_saml/idp_setup - Navigate to Extend menu on your Drupal admin console and click on Install new module button.
- Install the Drupal SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider module either by downloading the zip or from the URL of the package (tar/zip).
- Click on Enable newly added modules.
- Enable this module by checking the checkbox and click on install button.
- Configure the module at
{BaseURL}/admin/config/people/miniorange_saml/idp_setup
1.1. Using Composer:
1.2. Using Drush:
1.3. Manual installation:
Steps to configure Azure AD Single Sign-On (SSO) Login into Drupal website
1. Configure Azure AD as Identity Provider
Follow the steps below to configure Azure AD as IdP
Configure Azure AD as IdP
- Login to Azure AD portal https://portal.azure.com.
- Select Azure Active Directory.
- Select Enterprise Application.
- Click on New Application.
Configure Application
- Click on Create your own Application and enter the App name then click on Create button.
- Click on the Setup Setup Single sign-on.
- Select the SAML tab.
- After clicking on Edit, enter the SP Entity ID for Identifier and the ACS URL for Reply URL from Service Provider Metadata tab of the module and click on the Save button.
- By default, the following Attributes will be sent in the SAML response. You can view or edit the claims sent in the SAML response to the application under the Attributes & Claims tab.
- Copy the App Federation Metadata Url to get the Endpoints required for configuring your Service Provider.
- Assign users and groups to your SAML application
- Navigate to Users and groups tab and click on Add user/group.
- Click on Users to assign the required user and then click on Select button.
- Role Assigned Successfully
- You have successfully configured Azure AD as SAML IdP ( Identity Provider) for achieving Azure AD SSO login into your Drupal Site.
2. Configure Drupal as Service Provider
- In Drupal SAML Module, go to Service Provider Setup tab. There are three ways to configure the Module:
- Click on Upload IDP Metadata.
- Enter Metadata URL (copied in step 2) and click on Fetch Metadata.
- Click on Upload IDP Metadata.
- Upload metadata file and click on Upload.
- Click on Configure Test to see the application's SAML documentation.
- Copy SAML Entity ID,SAML Single Sign On Service URL and SAML Signing Certificate from applications SAML documentation and paste it in IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate fields respectively in the Module.
By Azure AD Metadata URL :
By Uploading Azure AD Metadata File:
Manual Configuration :
| Identity Provider Name | For Example:Azure AD |
| IdP Entity ID or Issuer | SAML Entity ID |
| SAML Login URL | SAML Single Sign On Service URL |
| X.509 Certificate | SAML Signing Certificate |
Follow the steps below to configure Azure AD as IdP
Configure Azure AD as IdP
- Navigate to Azure AD portal https://portal.azure.com.
- Click on Azure Active Directory from Azure services.
- In the left-hand navigation pane, click the App registrations service, and click New registration.
- Assign a Name and Redirect URI to application. Redirect URI will be ACS URL provided in Service Provider Metadata tab of the Module. Select Web app as Application type and click on Register button.
- You’ll see the app on App Registration window. Click on Authentication option which will open Authentication window and then click on Add a Platform button under this window. Now, add Redirect URI and Logout URL and click on Configure button.
- Click on Expose an API display on the leftside of Dashboard. Here change Application ID URI value with the SP-Enity ID / Issuer value provided in Service Provider Metadata tab of the Module and save.
Configure Application
- Click on App registrations display on the leftside of Dashboard.
- Click on Endpoints on App Registration window and copy Federation Metadata Document endpoint (will be used in step 3). You can also save the metadata document by going to this endpoint.
3. Configuring Drupal as Service Provider
- In miniOrange SAML Module, go to Service Provider Setup tab. There are three ways to configure the Module:
- Click on Upload IDP Metadata.
- Enter Metadata URL (copied in step 2) and click on Fetch Metadata.
- Click on Upload IDP Metadata.
- Upload metadata file and click on Upload.
- Copy SAML Entity ID, SAML Single-Sign-On Endpoint URL and X.509 certificate from Federation Metadata document and paste it in IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate fields respectively in the Module.
- What is Single Sign-On (SSO)?
- What is SAML?
- What is SSO? How works SAML SSO authentication?
- Azure AD - Overview
- Drupal Azure Single Sign On (SAML SSO)
- Azure AD SSO | Azure Single Sign-On (SSO) Login
- Configure Azure AD as Identity Provider (IdP) for SSO Login
- Azure AD - What is Azure Active Directory?
- Frequently Asked Questions (FAQs)
By Azure AD Metadata URL :
By Uploading Azure AD Metadata File:
Manual Configuration :
| Identity Provider Name | For Example:Azure AD |
| IdP Entity ID or Issuer | SAML Entity ID in the Federation Metadata document |
| SAML Login URL | SAML Single-Sign-On Endpoint URL in the Federation Metadata document |
| X.509 Certificate | x.509 Certificate in the Federation Metadata document |
24*7 Active Support:
If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) Login module.
Free Trial:
If you would like to test out the module to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at drupalsupport@xecurify.com requesting a trial. You can create an account with us using this link.
Additional Resources
Our Other modules:
Need Help? We are right here!
