SAML Single Sign-On into Joomla using IdentityServer4 | IdentityServer4 SSO | Login using IdentityServer4

miniOrange Joomla SAML SP SSO plugin helps you to integrate your Joomla site to IdentityServer4 using SAML 2.0 protocol. The miniOrange Joomla SAML SP Single Sign-on (SSO) plugin is simple to set up IdentityServer4 SSO into Joomla and enable secure login into Joomla. As a result, users can access multiple Joomla applications with one login after authenticating with their IdentityServer4 IDP credentials.

Our plugin is compatible with Joomla 3 as well as Joomla 4 with all the SAML 2.0 compliant Identity Providers. Here we will go through a step-by-step guide to configure SAML SSO login between the Joomla site and IdentityServer4 by considering IdentityServer4 as IDP (Identity Provider) & Joomla as SP (Service Provider).

Download of Plugin

Joomla SAML Handbook

This detailed Handbook for the Joomla SAML SP Single Sign On plugin gives an in-depth explanation of the features of the plugin.

Free Configuration Support and Trial

If you want any assistance or support while configuring a plugin or integrating IdentityServer4 with Joomla, then click on the Free Configuration Setup button.

We provide a 7-day full feature trial of our license version of the plugin where you can thoroughly test out all the features of the plugin on your site. Click on the Free Business Trial button if you want us to set up the trial for you.

Steps to Integrate IdentityServer4 Single Sign-On (SSO) with Joomla SAML SP

1. Download and setup Joomla SAML SP Plugin

• Download the zip file for the miniOrange SAML SP plugin for Joomla from the link here.
• Login into your Joomla site’s Administrator console.
• From left toggle menu, click on System, then under Install section click on Extensions.

• Here click on Browse for file button to locate and install the plugin file downloaded earlier.

• Once Installation of plugin is successful. Now click on Start Using miniOrange SAML SP plugin.

• Then go to the Service Provider Metadata tab, scroll down and copy the SP-EntityID and the ACS URL.

2. Configure IdentityServer4 as IdP

Note: To add SAML IDP functionality you would require modifications in the Startup.cs file.

            
services.AddIdentityServer()

                // the rest of registrations (clients, resources, users, etc)

                  .AddSigningCredential(new X509Certificate2(/*your cert*/))

                  .AddSamlPlugin(options => {
                        options.Licensee = "/*your license key org name*/";

                        options.LicenseKey = "/*your license key*/";

                })

                .AddInMemoryServiceProviders(new List());

        
app.UseIdentityServer()

              .UseIdentityServerSamlPlugin();
    

Configure IdentityServer4 as Service Provider

• In the Config.cs file create a Client entry.

            
new Client {

                   ClientId = "http://localhost:5001/saml",

                   ClientName = "RSK SAML2P Test Client",

                   ProtocolType = IdentityServerConstants.ProtocolTypes.Saml2p,

                   AllowedScopes = { "openid", "profile" }
           }
        

ClientId	Provide entityID from Service Provider Metadata tab
ClientName	Provide Service Provider name
ProtocolType	IdentityServerConstants.ProtocolTypes.Saml2p
AllowedScopes	openid, profile

• In the Config.cs configure SAML Specifics using Service Provider object.

            
new ServiceProvider {

                   EntityId = "http://localhost:5001/saml",

                   SigningCertificates = {new X509Certificate2("TestClient.cer")},/*Enter the certificate name*/

                   AssertionConsumerServices = { new Service(SamlConstants.BindingTypes.HttpPost, "http://localhost:5001/signin-saml") }

           };

• Note: The Client ID and Entity ID must be Equal.
• You would need the following information from the Service Provider Metadata Here.

EntityId	Provide Entity-Id from Service Provider Metadata tab
Signing Certificates	Download the Certificate from Service Provider Metadata tab of the plugin and enter Certificate name
Assertion Consumer Service URL	Provide the required Binding type followed by the ACS URL: Http Post method: SamlConstants.BindingTypes.HttpPost Http Redirect method: SamlConstants.BindingTypes.HttpRedirect ACS URL: Provide ACS URL from Service Provider Metadata Tab

• To configure your Service Provider retrieve IDP Metadata by visiting /saml/metadata URL.
• You will get the endpoints required for the Service Provider configuration.

You have successfully configured IdentityServer4 as SAML IDP ( Identity Provider) for achieving IdentityServer4 SSO login into your joomla Site.

3. Configure IdentityServer4 Identity Provider with Joomla SAML Service Provider