Configure IBM Single Sign-On (SSO) with Joomla OAuth Client Plugin

Overview

Single Sign-On (SSO) with IBM in Joomla uses OAuth Authorization to provide users secure access to the Joomla site. With our Joomla OAuth Single Sign-On (SSO) plugin, IBM acts as the OAuth provider, ensuring secure login for Joomla websites.

The integration of Joomla and IBM simplifies and secures the login process using OAuth protocol. This solution allows users to access their Joomla sites with Single Sign-On (SSO) using their IBM credentials, completely removing the need to store, remember, and reset multiple passwords.

In addition to offering OAuth Single Sign-On (SSO) using IBM credentials, the plugin also provides advanced SSO features like user profile attribute mapping, role mapping, and Azure multi-tenant login and providing site access based on organization email domains. For further insights into the array of features we offer within the Joomla OAuth & OpenID Connect Client plugin, kindly visit our page here. You can follow the below steps to setup IBM OAuth SSO with Joomla.

Configuration Steps

In this configuration, IBM functions as the OAuth server, while Joomla allows users to log in with their IBM credentials by utilizing the Joomla OAuth Client Plugin.

Step 2: Configure IBM as OAuth Server

• Login/Signup to IBM developer portal using IBM developer account.
• Search and Select App ID service.

• Select a location and click on Create button.

• Now go to the App ID that you created in last step and go to applications tab. click on add applications to add a new application.

• Enter the name for your application and click on save button.

Step 3: Configure Client ID & Secret

• After saving the application, click on the dropdown icon besides the application, you will find the Client ID, Client Secret and OAuthServerUrl. Copy these details.

• Go to the Step 2 [Client ID & Secret] tab of the Joomla OAuth Client plugin, here paste the Client ID & Client Secret. Click on the Save Configuration button.

• Now, go to the Authentication settings tab in Manage authentication tab and add the web redirect url which copied in step1.

• If you don't have the users yet, you can add them by going to Users tab.

• IBM Endpoints Scope:

Authorize Endpoint:	https://server.oauth.com/mga/sps/oauth/oauth20/authorize
Access Token Endpoint:	https://server.oauth.com/mga/sps/oauth/oauth20/token
Get User Info Endpoint:	https://server.oauth.com/mga/sps/oauth/oauth20/userinfo
Set Client Credentials:	In Both (In Header and In Body)