SAML Single Sign-On into Joomla using Google Apps

Overview

miniOrange Joomla SAML SP SSO plugin helps you to integrate your Joomla site to Google apps using SAML 2.0 protocol. Our user-friendly plugin simplifies the process of setting up Single Sign-on (SSO) with Google apps in Joomla, ensuring a secure login experience. This enables users to access various Joomla sites effortlessly using their Google apps IDP credentials.

Our plugin is designed to be compatible with Joomla 3, 4 as well as 5 and works seamlessly with all SAML 2.0 compliant Identity Providers. For a detailed overview of the comprehensive features offered by the Joomla SAML SP plugin, please visit our page here. Below, we provide a step-by-step guide on configuring SAML SSO login between your Joomla site and Google apps, with Google apps serving as the Identity Provider (IDP) and Joomla as the Service Provider (SP).

Configuration Steps

In this setup, Google Apps serves as the repository for storing users i.e. it will act as the IDP while Joomla is where users will log in using their credentials from Google Apps where Joomla SAML SP SSO Plugin will be installed.

Step 2: Configure Google Apps as IDP (Identity Provider)

• Log into your Google Apps Dashboard.
• On the Admin Home, From left menu bar click on Apps -> Overview.

• In the Apps, select Web and mobile apps.

• Click on Add App then click on Add custom SAML app.

• Enter the Application details and then click on CONTINUE.

• Then under Google Identity Provider details tab you will get metadata of Google apps. Click on DOWNLOAD METADATA button. Then click on CONTINUE.

• Configure the following details you received from this step and then click on CONTINUE.

ACS URL	ACS (Assertion Consumer Service) URL from the plugin under Service Provider Metadata Tab.
SP Entity ID or Issuer	SP-EntityID / Issuer from the plugin under Service Provider Metadata Tab.
Signed Response	Checked.
Name ID	Select Basic Information from the first dropdown. Then Primary Email from the second dropdown.

• Select attributes by clicking on ADD MAPPING button. Then click on FINISH button.

• Click on User access to change the Service status.

• Change the Service status to ON for everyone. Then click on SAVE button.