Contents

Drupal Workplace SSO | Login into Workplace using Drupal IDP

Drupal Workplace SSO Integration will allow you to configure Single Sign-On ( SSO ) login between your Drupal site and Workplace by Facebook. Drupal as IdP SAML SSO module acts as a SAML 2.0 Identity Provider which can be configured to establish the trust between the module and Workplace by Facebook as Service Provider (SP) to securely authenticate users using Drupal credentials.
This Drupal Workplace SSO setup will also help you to manage your users in one single place. We provide the Drupal SAML Identity Provider module for Drupal 7, Drupal 8, and Drupal 9. Here we will go through a step-by-step guide to configure SAML IDP SSO login between Drupal website as IDP ( Identity Provider ) and Workplace by Facebook as SP ( Service Provider ).

If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module. If you want, we can also schedule an online meeting to help you configure the Drupal SAML IDP module.

Installation Steps

Using Composer
Using Drush
Manual Installation

Download the module:

Composer require 'drupal/miniorange_saml_idp'

Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Identity Provider using the search box.
Enable the module by checking the checkbox and click on install button.

Configure the module at

{BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

Install the module:
```
drush en miniorange_saml_idp
```
Clear the cache:
```
 drush cr
```

Configure the module at

{BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

Navigate to Extend menu on your Drupal admin console and click on Install new module button.
Install the Drupal SAML IDP 2.0 Single Sign On (SSO) - SAML Identity Provider module either by downloading the zip or from the URL of the package (tar/zip).
Click on Enable newly added modules.
Enable this module by checking the checkbox and click on install button.

Configure the module at

{BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

Steps to configure Workplace SAML Single Sign-On (SSO) Login into Drupal website

1. Configure Drupal site as Identity Provider

Navigate to the Service Provider Setup tab of the miniOrange SAML Identity Provider module on your Drupal site. There are two way to configure your Identity Provider ( Drupal as SAML IDP ):

A. By Uploading SP metadata:

Click on UPLOAD SP METADATA link.
You can either Upload Metadata File and click on Upload button or use a Upload Metadata URL and click on Fetch Metadata.

B. Manual Configuration:

Navigate to Service Provider Setup tab of the miniOrange Drupal IDP module.
Provide the required settings (i.e. Service Provider Name, SP Entity ID or Issuer, ACS (Assertion Consumer Service) URL, X.509 Certificate (Optional)) as provided by your Service Provider Workplace ( Workplace as SP ).

Service Provider Name	Enter any appropriate name for your Service Provider.
SP EntityID	Copy and paste the Audience URL from Workplace dashboard.
ACS URL	Copy and paste the ACS (Assertion Consumer Service) URL from Workplace dashboard

Click on the Save Configuration button to save your configuration. Then click on Test Configuration button to test your configuration.

2. Configure Workplace as Service Provider

Login to Workplace by Facebook.
Navigate to Admin Panel -> Security -> Authentication.
Check the Single-Sign On (SSO) box.
Default for new users: Select a required option.
Click on add new SSO Provider.

Workplace SAML Single Sign-On (SSO) Login - Admin panel

Enter the following:

SAML URL: SAML Login URL from the Identity Provider Metadata tab in miniOrange Drupal SAML IDP module
SAML Issuer URL: IDP-Entity ID / Issuer from URL from the Identity Provider Metadata tab in miniOrange Drupal SAML IDP module
To Enable Single Logout Select Enable SAML logout redirection.
SAML Logout URL:SAML Logout URL from the Identity Provider Metadata tab in miniOrange Drupal SAML IDP module
SAML Certificate: Certificate from the Identity Provider Metadata tab in miniOrange Drupal SAML IDP module

Scroll down to the SAML configuration. You will now see your Audience URL, Recipient URL, and ACS (Assertion Consumer Service) URL.

Workplace SAML Single Sign-On (SSO) Login - SAML Configuration-> Copy Audience, Recipient, ACS URL

Copy all the values from SAML Configuration and paste it into Identity Provider Setup tab of the miniOrange Drupal SAML IDP module
Click on Save Configuration button.
Click Test SSO in Workplace.

Workplace SAML Single Sign-On (SSO) Login - SAML Configuration -> Test SSO button

You will see a pop-up window confirming that the SAML connection is established correctly.

Workplace SAML Single Sign-On (SSO) Login - SSO Authenticated

Click Save Chages in Workplace:

Workplace SAML Single Sign-On (SSO) Login - Click on Save

24*7 Active Support

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML IDP SSO Login module.

Free Trial

If you would like to test out the module to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at drupalsupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources

Our Other modules

SAML SP | SAML IDP | User Provisioning & Sync | Two-Factor Authentication | Passwordless Authentication | OAuth/OIDC Client | LDAP / AD Login | OAuth Server | Decoupled / Headless Authentication | OTP Verification | Website Security | Rest API Authentication | SCIM User Provisioning