Drupal RSA SecurID SSO | Drupal SAML SSO Using RSA SecurID

Drupal RSA SecurID SSO setup will allow your user to login to your Drupal site using their RSA SecurID Credentials. The Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers. Here we will go through a guide to configure SAML SSO between Drupal and RSA SecurID. By the end of this guide, users from RSA SecurID should be able to login into the Drupal website.

If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module.

Step 1:Setup RSA SecurID as Identity Provider

  • Login to the RSA Secure ID as Super Admin.
  • In the Administration Console, click Application → Application Catalog.
  • Click Create From Template button on the top right corner.
  • Drupal RSA SecurID my application
  • Next to the SAML Direct, click select in the Choose Connector Template page. The Add Connector wizard appears.
  • Drupal SP RSA SecurID sso wizard connecter
  • Fill the required information in the Basic Information page on the Add Connector wizard.

    • Name:- Name of the application for eg. miniOrange Plugin.
    • Description (Optional):- Description for your application.
    • Disabled [a checkbox] (optional): Select this only if you want to make this application unavailable to users. When disabled, the application appears in My Application but does not appear in the RSA application portal.
    • Click Next Step button.
    • Drupal RSA SecurID sso rsa application
  • Fill the required information in the Connection Profile page.
    1. miniOrange image Connection Profile

      • Upload the miniOrange module metadata file and click on the Import Metadata button. You can download it from the Service Provider info tab of the module.
      • Verify the configured URLs and clicks on the Save button on the top right corner of the pop-up window.
      • Drupal RSA SecurID sso configured url

      miniOrange image Initiate SAML Workflow

      • Select SP-Initiated, if you want the SSO should be invoked from Application or select IDP-initiated, if you want the user should log in into RSA first and then access Application from his RSA Dashboard.
      • Configure base URL of your Application or you can leave it blank if IDP-initiated is selected.
      • Select Binding type: POST and Signed Checked.
      • Drupal RSA SecurID sso Binding type

      Drupal RSA SecurID sso saml idp issuer SAML Identity Provider(Issuer)

      • Upload the public and private key which will be used to signed SAML Response or you can generate new key pair by clicking on the Generate Cert Bundle button.
      • (Optional) Enable checkbox for Include Certificate in Outgoing Assertion.
      • Drupal RSA SecurID sso certificate outgoing assertion

      miniOrange image Service Provider

      • Assertion Consumer Service URL and Audience URL should be preconfigured if you have uploaded plugin’s metadata in the Connection Profile section. If not, you can find the required URLs from Service Provider Info tab of the miniOrange SAML plugin and update the URL here.
      • Drupal RSA SecurID sso Saml service provider

      miniOrange image User Identity

      • Configure NameID information that identifies the user on whose behalf the SAML Assertion is generated.
      • Drupal RSA SecurID sso SAML assertion

      miniOrange image Advanced Configuration: Attribute Extention

      • Configure additional user information to be sent to the Application in the SAML Response, for example, username, email, display name, groups etc.
      • Drupal RSA SecurID sso SAML response

      miniOrange image Advanced Configuration: Uncommon Formatting SAML Response

      • Sign outgoing Assertion:- Assertion within Response.
      • Encrypt Assertion (Optional): If checked, you need to load miniOrange module public certificate and you can download it from the Service Provider Info tab of the module.
      • Unchecked Send encoded URL in Assertion.
      • Checked include issuer NameID format and select NameID Format as Unspecified.
      • Save the configuration and move to the next page i.e. User Access page.
      • Drupal RSA SecurID sso user access page
  • Define application access in the User Access page.
  • Configure application display settings for RSA end users like app icon etc and save the settings
  • Now, In the Administration Console, click Application My Application.
  • Find the app that you have configured and click on Edit Export Metadata. Keep the metadata handy, it will require to configure miniOrange module.
  • Drupal RSA SecurID sso export metadata
  • Click on Publish Changes in the top left corner of the RSA Admin Console to publish this configuration and immediately activate it.
  • Drupal RSA SecurID sso rsa admin

Step 2: Configuring Drupal as Service Provider (SP)

  • In miniOrange SAML Module, go to Service Provider Setup tab. There are three ways to configure the Module:
    • miniOrange image By RSA Metadata URL :

      • Click on Upload IDP Metadata.
      • Enter Metadata URL and click on Fetch Metadata.

      miniOrange image By Uploading RSA Metadata File:

      • Click on Upload IDP Metadata.
      • Upload metadata file and click on Upload.

      miniOrange image Manual Configuration :

      • Copy SAML Entity ID, SAML Single-Sign-On Endpoint URL and X.509 certificate from Federation Metadata document and paste it in IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate fields respectively in the Module.
      Identity Provider Name For Example:RSA
      IdP Entity ID or Issuer SAML Entity ID in the Federation Metadata document
      SAML Login URL SAML Single-Sign-On Endpoint URL in the Federation Metadata document
      X.509 Certificate x.509 Certificate in the Federation Metadata document

Free Trial

If you don't find what you are looking for, please contact us at drupalsupport@xecurify.com or call us at +1 978 658 9387.

Hello there!

Need Help? We are right here!

Contact miniOrange Support

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com