Search Results :

×

Drupal Okta SSO Login with OAuth Client | Drupal Okta Login


Drupal Okta SSO integration will allow you to configure Single Sign-On ( SSO ) login between your Drupal site and Okta using OAuth/OpenID protocol. Drupal OAuth 2.0/OpenID connect module gives the ability to enable login using OAuth 2.0/OIDC Single Sign-On to Drupal Site. We provide the Drupal OAuth/OpenID Client module for Drupal 7, Drupal 8, Drupal 9, and Drupal 10.
Here we will go through a guide to configure the SSO login between Drupal and Okta. By following these steps, users of Okta will be able to log into the Drupal site using their Okta credentials.
If you have any queries or if you need any sort of assistance in configuring the module, you can contact us at drupalsupport@xecurify.com. If you want, we can also schedule an online meeting to help you configure the Drupal OAuth & OpenID Connect Login – OAuth2 Client SSO Login module.


Pre-requisite: Download and Installation 


  • Download the module:
    Composer require 'drupal/miniorange_oauth_client'
  • Navigate to Extend menu on your Drupal admin console and search for miniOrange OAuth Client Configuration using the search box.
  • Enable the module by checking the checkbox and click on the Install button.
  • You can configure the module at:
    {BaseURL}/admin/config/people/miniorange_oauth_client/config_clc
  • Install the module:
    drush en drupal/miniorange_oauth_client
  • Clear the cache:
     drush cr
  • You can configure the module at:
    {BaseURL}/admin/config/people/miniorange_oauth_client/config_clc
  • Navigate to Extend menu on your Drupal admin console and click on Install new module.
  • Install the Drupal OAuth & OpenID Connect Login - OAuth2 Client SSO Login module either by downloading the zip or from the URL of the package (tar/zip).
  • Click on Enable newly added modules.
  • Enable this module by checking the checkbox and click on install button.
  • You can configure the module at:
    {BaseURL}/admin/config/people/miniorange_oauth_client/config_clc

Video Setup Okta Single Sign-on Integartion with Drupal OAuth/OpenID Client

You can refer the steps to configure Okta SSO integration with the Drupal OAuth/OIDC Client module from the Video or Documentation given below:


How to Integrate Okta (OAuth) Single Sign-on with Drupal OAuth/OpenID Client

1. Setup Drupal as OAuth Client

  • After installing the module, go to the Configuration tab and click on the miniOrange OAuth Client Configuration module link.
  • Drupal OAuth Client - Configuration tab and select miniorange oauth client module
  • In the Configure OAuth tab, select Okta (OAuth) from the Select Application dropdown list.
  • Note: In case you can't find your Application/Provider in the Select Application dropdown list, choose the Custom OAuth 2.0 Provider.

  • Copy the Callback/Redirect URL and keep it handy.
  • Please Note: If your provider only supports HTTPS Callback/Redirect URL and you have an HTTP site, just save your base site URL in the Sign In Settings tab with HTTPS.

  • Enter the application name in the Display Name text field. For example, Okta
  • Drupal OAuth Client - Configure OAuth tab Select Okta and copy the Callback URL

2. Setup Okta as an OAuth Provider

  • Sign up for or log in to your Okta Developer account.
  • Switch to Classic UI to configure app.
  • Okta SSO Login - Switch to Classic UI
  • From the left side navigation panel, click on Applications -> then select Applications.
  • Okta SSO - Selcct Applications from the left navigation panel
  • Under Application, click on Create App Inetgration button to create new application.
  • Okta SSO - Click on Create App Integration button
  • After clicking on Create App Integration button, Open a popup window Create a new App Integration as below image:
    • In the Sign-in method: Select OIDC-OpenID Connect.
    • Application type: Select Web Application.
    • Click the Next button.
    Create a New App Integration in Okta
  • Enter the following information in the New Web App Integration panel:
    • Enter the name of application in App integration name text field under General Settings. Drupal, for example.
    • Paste the previously copied Callback/Redirect URL into the Sign-in redirect URIs text field.
    • Assignments: Select Allow everyone in your organization to access from the Controlled access option, and unchecked the Enable immediate access with Federation Broker Mode. When you've finished configuring, click on the Save button.
    Okta SSO - New Web App Integration

3. Integrating Drupal with Okta

  • Okta assigns a unique Application ID to your application. Navigate to the General tab.
  • Click on the copy Icon to copy the Client ID from Client Credentials.
  • Drupal OAuth 2.0 OIDC Single Sign-on Okta SSO Client Credentials
  • In Drupal’s Configure OAuth tab paste the copied Client ID into the Client ID text field.
  • Drupal OAuth OpenID Single Single On Paste the Client ID
  • Navigate to the Okta portal's General tab.
  • Copy the Secret by clicking the copy Icon in the CLIENT SECRETS section.
  • Okta Client Secret section, copy secret
  • In Drupal’s Configure OAuth tab paste the copied Secret into the Client Secret text field.
  • Drupal OAuth OpenID Single Single On - Paste the Client Secret

How to find your Okta URL/Domain:

  • Go to the Okta Dashboard.
  • Navigate to the Profile Icon in the upper right navigation panel and click on it.
  • Okta dashboard copy the domain url from the profile
  • Now, navigate to the Drupal site and replace the Okta Domain with {yourOktaDomain} in the Authorize Endpoint, Access Token Endpoint, and Get User Info Endpoint text fields that you previously copied. Click the Save Configuration button.
  • Okta dashboard - paste copied okta domain url replace with access token, authorize endpoint itself

    You can refer to the Okta Endpoints and Scope from the table given below:

    Scope: openid email profile
    Authorize Endpoint: https://{yourOktaDomain}.com/oauth2/default/v1/authorize
    Access Token Endpoint: https://{yourOktaDomain}.com/oauth2/default/v1/token
    Get User Info Endpoint: https://{yourOktaDomain}.com/oauth2/default/v1/userinfo

4. Test Configuration of Drupal with Okta

  • After successfully saving the configurations, click on the Perform Test Configuration button to test the connection between Drupal and Okta.
  • Drupal OAuth OpenID Single Single On - Click on Perform Test Configuration button
  • This Test Configuration window will provide you with a list of the attributes that are coming from the Okta.
  • Select the Email Attribute from the dropdown menu in which the user's email ID is obtained and click on the Done button.
  • Okta sso login with drupal OAuth OpenID Single Single On - Open a Test Configuration popup window
  • Now, in the Attribute & Role Mapping tab, you can also choose the Username Attribute from the dropdown and click on the Save Configuration button.
  • Okta sso login with drupal OAuth OpenID Single Single On - Select Username Attribute from Attribute and Role Mapping tab

    Please note: Mapping the Email Attribute is mandatory for your login to work.

  • Now log out and go to your Drupal site’s login page. You will automatically find a Login with Okta link there. If you want to add the SSO link to other pages as well, please follow the steps given in the image below :
  • Okta sso login with drupal OAuth OpenID Single Single On

24*7 Active Support

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal OAuth/OpenID Single Sign On module.

Additional Resources

Our Other modules

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com