Search
START TYPING AND PRESS ENTER TO SEARCH

SAML Single Sign On (SSO) into Drupal using Azure AD as IDP

Drupal SAML Azure AD SSO setup will allow your user to login to your Drupal site using their Azure AD Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers ( IDP ). We provide Drupal SAML SP 2.0 Single Sign on (SSO) - SAML Service Provider module which is compatible with Drupal 7, Drupal 8 as well as Drupal 9. Here we will go through a guide to configure SAML SSO between Drupal and Azure AD Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.

If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module. If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) module.

Setup Video Azure AD as IDP

You can refer to the steps to Configure Azure AD with the Drupal SAML SSO from the Video or Documentation given below


Features and Pricing

Know more about Drupal SAML Single Sign On - Service Provider module from here.

Pre-requisites: Download

You can download the SAML Single Sign On - Service Provider module from here.

1. Install Drupal SAML SP 2.0 Single Sign On (SSO) module

    1.1. Using Composer:

    • Composer require drupal/miniorange_saml
    • Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Service Provider using the search box.
    • Enable the module by checking the checkbox and click on install button.
    • Configure the module at 
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

    1.2. Using Drush:

    • Download the module: 
      drush dl drupal/miniorange_saml
    • Install the module: 
      drush en drupal/miniorange_saml
    • Clear the cache:
       drush cr
    • Configure the module at 
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

    1.3. Manual installation:

    • Navigate to Extend menu on your Drupal admin console and click on Install new module button.
    • Install the Drupal SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider module either by downloading the zip or from the URL of the package (tar/zip).
    • Click on Enable newly added modules.
    • Enable this module by checking the checkbox and click on install button.
    • Configure the module at 
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

Steps to configure Azure AD Single Sign-On (SSO) Login into Drupal website

Configure Azure AD through App Registrations

2. Configuring Azure AD as Identity Provider

Follow the steps below to configure Azure AD as IdP

miniorange img Configure Azure AD as IdP
  • Navigate to Azure AD portal https://portal.azure.com.
  • Click on Azure Active Directory from Azure services.
    • Drupal SAML Single Sign On (SSO), Azure AD SSO Login
  • In the left-hand navigation pane, click the App registrations service, and click New registration.
    • Drupal SAML Single Sign On (SSO), Azure AD SSO App-Registration
  • Assign a Name and Redirect URI to application. Redirect URI will be ACS URL provided in Service Provider Metadata tab of the Module. Select Web app as Application type and click on Register button.
    • Drupal SAML Single Sign On (SSO) register an application
  • You’ll see the app on App Registration window. Click on Authentication option which will open Authentication window and then click on Add a Platform button under this window. Now, add Redirect URI and Logout URL and click on Configure button.
    • Drupal SAML Single Sing On (SSO) configure app
  • Click on Expose an API display on the leftside of Dashboard. Here change Application ID URI value with the SP-Enity ID / Issuer value provided in Service Provider Metadata tab of the Module and save.
    • Drupal SAML Single Sing On (SSO) API properties window

2.1 Configure Application

  • Click on App registrations display on the leftside of Dashboard.
  • Click on Endpoints on App Registration window and copy Federation Metadata Document endpoint (will be used in step 3). You can also save the metadata document by going to this endpoint.
    • Drupal SAML Single Sing On (SSO) Application endpoints

3. Configuring Drupal as Service Provider

  • In miniOrange SAML Module, go to Service Provider Setup tab. There are three ways to configure the Module:

      • app-registration By Azure AD Metadata URL :

      • Click on Upload IDP Metadata.
      • Enter Metadata URL (copied in step 2) and click on Fetch Metadata.

      app-registration By Uploading Azure AD Metadata File:

      • Click on Upload IDP Metadata.
      • Upload metadata file and click on Upload.

      app-registration Manual Configuration :

      • Copy SAML Entity ID, SAML Single-Sign-On Endpoint URL and X.509 certificate from Federation Metadata document and paste it in IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate fields respectively in the Module.
      Identity Provider Name For Example:Azure AD
      IdP Entity ID or Issuer SAML Entity ID in the Federation Metadata document
      SAML Login URL SAML Single-Sign-On Endpoint URL in the Federation Metadata document
      X.509 Certificate x.509 Certificate in the Federation Metadata document

24*7 Active Support:

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) Login module.

Free Trial:

If you would like to test out the module to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at drupalsupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources

Our Other modules:

SAML SP  |  SAML IDP  |   2FA/Passwordless Login  |   OAuth/OIDC Client  |  LDAP/AD Login  |  OAuth Server  |  Decoupled/Headless Authentication  |  OTP Verification  |  Website Security  |  Rest API Authentication  |  SCIM User Provisioning

Configure Azure AD through Enterprise Applications

2. Configuring Azure AD as Identity Provider

Follow the steps below to configure Azure AD as IdP

miniorange img Configure Azure AD as IdP
  • Login to Azure AD portal https://portal.azure.com.
  • Select Azure Active Directory.
    • Drupal SAML Single Sing On (SSO) enterprise applications
  • Select Enterprise Application.
    • Drupal SAML Single Sing On (SSO) select enterprise application
  • Click on New Application.
    • Drupal SAML Single Sing On (SSO) new application

2.1 Configure Application

  • Click on Create your own Application and enter the App name then click on Create button.
    • Drupal saml sp enter app name
  • Click on the Setup Setup Single sign-on.
    • Drupal SAML Single Sing On (SSO) select SSO
  • Select the SAML tab.
    • Drupal SAML Single Sing On (SSO) select SAML
  • After clicking on Edit, enter the SP Entity ID for Identifier and the ACS URL for Reply URL from Service Provider Metadata tab of the module and click on the Save button.
    • Drupal SAML Single Sing On (SSO) Acs url Drupal SAML Single Sing On (SSO) enter entity url
  • By default, the following Attributes will be sent in the SAML response. You can view or edit the claims sent in the SAML response to the application under the Attributes & Claims tab.
    • Drupal SAML Single Sing On (SSO) Attributes
  • Copy the App Federation Metadata Url to get the Endpoints required for configuring your Service Provider.
    • Drupal SAML Single Sing On (SSO) metadata url
  • Assign users and groups to your SAML application
  • Navigate to Users and groups tab and click on Add user/group.
    • Drupal SAML Single Sing On (SSO) user and group tab
  • Click on Users to assign the required user and then click on Select button.
    • Drupal SAML Single Sing On (SSO) select user
  • Role Assigned Successfully
    • Drupal SAML Single Sing On (SSO) role assigned
  • You have successfully configured Azure AD as SAML IdP ( Identity Provider) for achieving Azure AD SSO login into your Drupal Site.

3. Configuring Drupal as Service Provider

  • In Drupal SAML Module, go to Service Provider Setup tab. There are three ways to configure the Module:

      • miniOrange image By Azure AD Metadata URL :

      • Click on Upload IDP Metadata.
      • Enter Metadata URL (copied in step 2) and click on Fetch Metadata.

      miniOrange image By Uploading Azure AD Metadata File:

      • Click on Upload IDP Metadata.
      • Upload metadata file and click on Upload.

      miniOrange image Manual Configuration :

      • Click on Configure Test to see the application's SAML documentation.
        • Drupal SAML Single Sing On (SSO) application's SAML documentation
      • Copy SAML Entity ID,SAML Single Sign On Service URL and SAML Signing Certificate from applications SAML documentation and paste it in IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate fields respectively in the Module.
        • Drupal SAML Single Sing On (SSO) configure module using application's metadata
      Identity Provider Name For Example:Azure AD
      IdP Entity ID or Issuer SAML Entity ID
      SAML Login URL SAML Single Sign On Service URL
      X.509 Certificate SAML Signing Certificate

24*7 Active Support:

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) Login module.

Free Trial:

If you would like to test out the module to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at drupalsupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources

Our Other modules:

SAML SP  |  SAML IDP  |   2FA/Passwordless Login  |   OAuth/OIDC Client  |  LDAP/AD Login  |  OAuth Server  |  Decoupled/Headless Authentication  |  OTP Verification  |  Website Security  |  Rest API Authentication  |  SCIM User Provisioning
Hello there!

Need Help? We are right here!
support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com