Joomla SAML Single Sign On (SSO) using Google Apps as Identity Provider (IdP)
Google apps Single Sign On (SSO) for Joomla miniOrange provides a ready to use solution for Joomla. This solution ensures that you are ready to roll out secure access to your Joomla site using Google Apps within minutes.
Step 1: Configuring Google Apps as Identity Provider (IdP)
- Go to https://admin.google.com and login to your Google Apps Administrator account.
- On the Admin Home, select More Controls Apps.
- In the App Settings, select SAML apps.
- Click on the "+" button at the bottom right corner to create a new SAML app.
- Now select SETUP MY OWN CUSTOM APP from the popup.
- On the next screen, note down the SSO URL, Entity ID URLs and download the certificate. These will be required while configuring the Plugin.
- Once you have noted the URLs and downloaded the certificate, click on Next.
- Enter the Application Name and Description. Click on Next.
- Configure the following things on the next screen:
- Click on Next. Then click on Finish.
- Now go to SAML Apps again. Click on the menu link corresponding to your app (See the screenshot). Then select ON for everyone.
- From the popup, Click on TURN ON FOR EVERYONE.
| ACS URL | ACS (Assertion Consumer Service) URL from the plugin under Service Provider Metadata Tab. |
| Entity ID | SP-EntityID / Issuer from the plugin under Service Provider Metadata Tab. |
| Signed Response | Checked |
| Name ID | Select Basic Information from the first dropdown. Then Primary Email from the second dropdown. |
Step 2: Configuring Joomla as Service Provider (SP)
- In Joomla SAML plugin, go to Service Provider Setup Tab. Enter the following values:
- Add a button on your site login page with the following URL:
| Single Sign-On Service URL | The SSO URL that you noted while configuring the Joomla site in Google Apps. |
| IdP Entity ID or Issuer: | The Entity ID that you noted while configuring the Joomla site in Google Apps. |
| X.509 Certificate: | Open the downloaded certificate in the Notepad. Copy/paste the entire content of the file here. |
Step 3: Attribute Mapping (It is Optional to fill this). This is Premium feature.
- Attributes are user details that are stored in your Identity Provider.
- Attribute Mapping helps you to get user attributes from your Identity Provider (Google-apps) and map them to Joomla user attributes like firstname, lastname etc.
- While auto-registering the users in your Joomla site these attributes will automatically get mapped to your Joomla user details.
- In miniOrange SAML plugin, go to Attribute Mapping tab and fill in all the fields.
- You can check the Test Configuration Results under Service Provider Setup tab to get a better idea of which values to map here.
| Username: | Name of the username attribute from IdP (Keep NameID by default) |
| Email: | Name of the email attribute from IdP (Keep NameID by default) |
| Group/Role: | Name of the Role attribute from your Identity Provider (Google-apps) |
Step 4: Group Mapping (It is Optional to fill this). This is Premium feature.
- Joomla uses a concept of Roles, designed to give the site owner the ability to control what users can and cannot do within the site.
- Role mapping helps you to assign specific roles to users of a certain group in your Identity Provider (Google-apps).
- While auto registering, the users are assigned roles based on the group they are mapped to.
Step 5: Redirection & SSO Links.
- Go to Redirection & SSO Links tab. There are multiple features availabe in this tab like Auto redirect the user to Identity Provider and Enable Backed Login for Super Users.To use these features, click on the respective checkboxes.
Miniorange Joomla SAML Single sign-on(web SSO) supports multiple known IDPs like ADFS, Azure AD, Salesforce, Shibboleth, Onelogin, Okta, SimpleSamlPhp, Google apps, Bitium, OpenAM, miniorange IDP, Centrify and many more.
sso id, one login, single sign-on, saml, adfs, Service provider, Joomla extensions, single sign-on SSO, Web SSO, miniorange, Joomla plugins, single sign-on solutions, Salesforce sso, saml Php, saml authentication, SAML Service provider, saml 2.0 specification, google IDP, assertion consumer service, Joomla saml acs URL, saml issuer, saml claims, Joomla salesforce as Identity Provider, single sign-on solution open-source, saml 2.0 identity provider, saml idp vs sp, SAMl 2.0, SAML SP metadata, saml client, saml library, saml documentation, saml attribute mapping, Joomla SSO, best single sign-on solution, saml relying party, Joomla authentication plugin.
For further details refer :
https://support.google.com/a/answer/60224?hl=en
Business Trial For Free
If you don't find what you are looking for, please contact us at info@xecurify.com or call us at +1 978 658 9387.