Drupal RSA SecurID SSO | Drupal SAML SSO Using RSA SecurID


Drupal SAML RSA SecurID SSO ( Single Sign-on ) setup will allow your user to login to your Drupal site using their RSA SecurID Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-on for Drupal. This module is compatible with all SAML Identity Providers ( IDP ). We provide Drupal SAML Single Sign on - Service Provider module which is compatible with Drupal 7, Drupal 8 and Drupal 9. Here we will go through a guide to configure SAML SSO between Drupal and RSA SecurID Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.
If you have any queries or if you need any sort of assistance in configuring the module, you can contact us at drupalsupport@xecurify.com. If you want, we can also schedule an online meeting to help you configure the Drupal SAML Single Sign on - Service Provider SSO Login module.

Features and Pricing

Know more about Drupal SAML Single Sign On - Service Provider module from here.

Pre-requisites: Download

You can download the SAML Single Sign On - Service Provider module from here.

Module Handbook

This detailed Handbook for the SAML Single Sign On - Service Provider module, gives an in depth explanation of the features of the module. You can refer to the handbook at anytime - it is always available to you, either via This link, or directly from the module for quicker access.

1. Install Drupal SAML SP 2.0 Single Sign On (SSO) module

    1.1. Using Composer:

    • Composer require drupal/miniorange_saml
    • Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Service Provider using the search box.
    • Enable the module by checking the checkbox and click on install button.
    • Configure the module at
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

    1.2. Using Drush:

    • Download the module:
      drush dl drupal/miniorange_saml
    • Install the module:
      drush en drupal/miniorange_saml
    • Clear the cache:
       drush cr
    • Configure the module at
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

    1.3. Manual installation:

    • Navigate to Extend menu on your Drupal admin console and click on Install new module button.
    • Install the Drupal SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider module either by downloading the zip or from the URL of the package (tar/zip).
    • Click on Enable newly added modules.
    • Enable this module by checking the checkbox and click on install button.
    • Configure the module at
      {BaseURL}/admin/config/people/miniorange_saml/idp_setup

Steps to configure RSA SecurID SAML Single Sign-On ( SSO ) Login into Drupal site

2. Setup Drupal as Service Provider

  • In the miniOrage SAML Service Provider module, go to Service Provider Setup tab of the module. There are two way to configure Drupal SAML Service Provider SSO module:
    • A. By Uploading IDP Metadata
    • Click on Upload IDP Metadata link.
    • Click on Upload Metadata File and click on Upload File to fetch your information.
    • You can either Upload Metadata URLand click on Fetch Metadata button.
    • Drupal SAML Service Provider - upload idp metadata
      B. Manual Configuartion
    • Provide the required settings (i.e. Identity Provider Name, Idp Entity ID or Issuer, SAML Login URL and X.509 Certificate ) find to your Identity Provider RSA SecurID and click on Save Configuration button to save your configuration.
    • Identity Provider Name Enter name of Identity Provider
      Idp Entity ID or Issuer Copy Idp Entity ID / Issuer from RSA SecurID Dashboard and paste it.
      SAML Login URL Copy Single Sign On URL from RSA SecurID Dashboard and paste it.
      X.509 Certificate Copy and Download Signing certificate from RSA SecurID Dashboard and paste it.
      Drupal SAML Service Provider - Manual configuartion

3. Setup RSA SecurID as Identity Provider

Follow the following steps to Configure RSA SecurID as IdP

miniorange img Configure RSA SecurID as IdP
  • Login to the RSA Secure ID as Super Admin.
  • In the Administration Console, click Application → Application Catalog.
  • Click Create From Template button on the top right corner.
  • Drupal RSA SecurID my application
  • Next to the SAML Direct, click select in the Choose Connector Template page. The Add Connector wizard appears.
  • Drupal SP RSA SecurID sso wizard connecter
  • Fill the required information in the Basic Information page on the Add Connector wizard.

    • Name:- Name of the application for eg. miniOrange Plugin.
    • Description (Optional):- Description for your application.
    • Disabled [a checkbox] (optional): Select this only if you want to make this application unavailable to users. When disabled, the application appears in My Application but does not appear in the RSA application portal.
    • Click Next Step button.
    • Drupal RSA SecurID sso rsa application
  • Fill the required information in the Connection Profile page.
    1. miniOrange image Connection Profile

      • Upload the miniOrange module metadata file and click on the Import Metadata button. You can download it from the Service Provider info tab of the module.
      • Verify the configured URLs and clicks on the Save button on the top right corner of the pop-up window.
      • Drupal RSA SecurID sso configured url

      miniOrange image Initiate SAML Workflow

      • Select SP-Initiated, if you want the SSO should be invoked from Application or select IDP-initiated, if you want the user should log in into RSA first and then access Application from his RSA Dashboard.
      • Configure base URL of your Application or you can leave it blank if IDP-initiated is selected.
      • Select Binding type: POST and Signed Checked.
      • Drupal RSA SecurID sso Binding type

      Drupal RSA SecurID sso saml idp issuer SAML Identity Provider(Issuer)

      • Upload the public and private key which will be used to signed SAML Response or you can generate new key pair by clicking on the Generate Cert Bundle button.
      • (Optional) Enable checkbox for Include Certificate in Outgoing Assertion.
      • Drupal RSA SecurID sso certificate outgoing assertion

      miniOrange image Service Provider

      • Assertion Consumer Service URL and Audience URL should be preconfigured if you have uploaded plugin’s metadata in the Connection Profile section. If not, you can find the required URLs from Service Provider Info tab of the miniOrange SAML plugin and update the URL here.
      • Drupal RSA SecurID sso Saml service provider

      miniOrange image User Identity

      • Configure NameID information that identifies the user on whose behalf the SAML Assertion is generated.
      • Drupal RSA SecurID sso SAML assertion

      miniOrange image Advanced Configuration: Attribute Extention

      • Configure additional user information to be sent to the Application in the SAML Response, for example, username, email, display name, groups etc.
      • Drupal RSA SecurID sso SAML response

      miniOrange image Advanced Configuration: Uncommon Formatting SAML Response

      • Sign outgoing Assertion:- Assertion within Response.
      • Encrypt Assertion (Optional): If checked, you need to load miniOrange module public certificate and you can download it from the Service Provider Info tab of the module.
      • Unchecked Send encoded URL in Assertion.
      • Checked include issuer NameID format and select NameID Format as Unspecified.
      • Save the configuration and move to the next page i.e. User Access page.
      • Drupal RSA SecurID sso user access page
  • Define application access in the User Access page.
  • Configure application display settings for RSA end users like app icon etc and save the settings
  • Now, In the Administration Console, click Application My Application.
  • Find the app that you have configured and click on Edit Export Metadata. Keep the metadata handy, it will require to configure miniOrange module.
  • Drupal RSA SecurID sso export metadata
  • Click on Publish Changes in the top left corner of the RSA Admin Console to publish this configuration and immediately activate it.
  • Drupal RSA SecurID sso rsa admin

You have successfully configured RSA SecurID as SAML IdP (Identity Provider) for achieving RSA SecurID SSO login into your Drupal Site.

In this Guide, you have successfully configured RSA SecurID SAML Single Sign-On ( RSA SecurID Login ) choosing RSA SecurID as IdP and Drupal as SP using miniOrange SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider Login module. This solution ensures that you are ready to roll out secure access to your Drupal site using CyberArk login credentials within secound.

24*7 Active Support

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP Single Sign On (SSO) module.

Additional Resources

Our Other modules

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com