Keycloak As IDP for Moodle
Step 1: Configure Keycloak as IDP
Follow the steps below to configure Keyclock as an Identity Provider
Setup IDP
- In theminiOrange SAML 2.0 SSO plugin, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure the Identity Provider.
- In your Keycloak admin console, select the realm that you want to use.
- Click on Clients from the left menu and then click on Create button to create a new client/application.
- Enter Client ID as the SP-EntityID / Issuer from the Service Provider Metadata and select SAML as the Client Protocol.
- Now click on Save.
- Configure the following in Keycloak:
- Under Fine Grain SAML Endpoint Configuration, configure the following:
- Click on Save.
| Client ID | The SP-EntityID / Issuer from the plugin's Service Provider Metadata tab |
| Name | Provide a name for this client |
| Description | Provide a description |
| Name ID Format | |
| Root URL | Leave empty or Base URL of Service Provider |
| Valid Redirect URIs | The ACS (Assertion Consumer Service) URL from the plugin's Service Provider Metadata tab |
| Assertion Consumer Service POST Binding URL | The ACS (Assertion Consumer Service) URL from the plugin's Service Provider Metadata tab |
| Logout Service Redirect Binding URL (Optional) | The Single Logout URL from the plugin's Service Provider Metadata tab |
Add Mappers
- Go to Mappers tab and click on Create button.
- In Create Protocol Mapper enter the details as given below.
- Click On Save.
- Click on Add Builtin button.
- Check the boxes of X500 givenName, X500 surname and X500 email attributes.
- Click on Add Selected button. You will see the mappings as shown in the photo below.
| Client ID | The SP-EntityID / Issuer from the plugin's Service Provider Metadata tab |
| Name | Username |
| Mapper Type | User Attribute |
| SAML Attribute Name | username |
| SAML Attribute NameFormat | Basic |
Download setup file
- Go to Realm Settings, click on SAML 2.0 Identity Provider Metadata mentioned as endpoints in the General Tab.
- Note the URL and keep it handy. Here you can find the information which will be used to configure the plugin.
×
![]()
Hello there!
Need Help? We are right here!
