SAML Single Sign-On into Joomla using Salesforce

Overview

miniOrange Joomla SAML SP SSO plugin helps you to integrate your Joomla site to Salesforce using SAML 2.0 protocol. Our user-friendly plugin simplifies the process of setting up Single Sign-on (SSO) with Salesforce in Joomla, ensuring a secure login experience. This enables users to access various Joomla sites effortlessly using their Salesforce IDP credentials.

Our plugin is designed to be compatible with Joomla 3, 4 as well as 5 and works seamlessly with all SAML 2.0 compliant Identity Providers. For a detailed overview of the comprehensive features offered by the Joomla SAML SP plugin, please visit our page here. Below, we provide a step-by-step guide on configuring SAML SSO login between your Joomla site and Salesforce, with Salesforce serving as the Identity Provider (IDP) and Joomla as the Service Provider (SP).

Download Plugin Pricing Plans Free Trial

Configuration Steps

In this setup, Salesforce serves as the repository for storing users i.e. it will act as the IDP while Joomla is where users will log in using their credentials from Salesforce where Joomla SAML SP SSO Plugin will be installed.

Step 2: Configure Salesforce as IDP (Identity Provider)

• Log into Salesforce and go to Setup.



• In the Setup Home on the left pane, select Apps -> App Manager.



• Here, click on the New External Client App button.



• Enter the External Client App Name, API Name and Contact Email.



• Under Web App Settings, check the Enable SAML checkbox and enter the following values here, then click the Create button.

Entity ID	Enter SP Entity ID / Issuer from the Service Provider Metadata tab of the module.
ACS URL	Enter ACS (Assertion Consumer Service) URL from the Service Provider Metadata tab of the module.
Subject Type	Username
Name ID Format	urn:oasis:names:tc:SAML:2.0:nameid-format:persistent





Assign Profiles:

• Now under App Policies click on the Edit button, then select the profiles you want to enable SAML for, then click on the Save button.



• Scroll down, then under the SAML Login Info section, copy the Metadata Discovery Endpoint URL.