SAML Single Sign-On (SSO) into Deskpro using Joomla as IDP

Single Sign-On in Deskpro using Joomla IDP allows users to log in to Deskpro using Joomla by configuring Deskpro as a Service Provider (SP) and Joomla as a SAML Identity Provider (IDP). This guide will take you through a step-by-step process to configure SSO between the two platforms.

What is Deskpro?
Deskpro is a helpdesk software solution that helps companies manage their communication with their customers and user base across multiple channels; email, live chat, voice, and social media. Includes all relevant support tools such as ticketing, live chat, CRM, and knowledgebase.

Pre-requisites: Download And Installation

Download

Free Trial

Install Joomla IDP Plugin

• Download the zip file for the miniOrange Joomla IDP plugin.
• Log into your Joomla site’s administrator console.
• From left toggle menu, click on System, then under Install section click on Extensions.

• Upload the downloaded zip file to install the Joomla IDP plugin.

• Installation of the plugin is successful. Now click on Start Using miniOrange SAML IDP Plugin to configure miniOrange Joomla IDP plugin.

Steps to configure Deskpro SSO with Joomla as IDP.

1. Configure Deskpro as Service Provider

• Go to the miniOrange Joomla IDP plugin, navigate to the Identity Provider tab.
• Here, you can find the Identity Provider Metadata XML URL/File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), and Certificate for SP configuration. Download the XML Metadata by clicking on the button as shown below.

• Go to Deskpro and Login to your Deskpro Dashboard.
• Click on Admin button from left menu bar.

• Click on CRM then open Auth and SSO tab and click on Add button.

• Select SAML Authentication from the list of apps.

• Enter the following details:
  

  SAML SSO URL	Enter SAML Login URL from the Identity Provider tab of the Joomla plugin.
  Remote logout URL	Enter SAML logout URL from the Identity Provider tab of the Joomla plugin.
  Certificate Fingerprint	Copy the Thumbprint of the certificate downloaded from the Identity Provider tab of the Joomla plugin. (To generate fingerprint follow the below mentioned steps)

  1. Open the certificate that was downloaded earlier.
  2. Copy all the content of the certificate and paste it in any online X.509 Certificate Fingerprint generator.
  3. Copy the Thumbprint generated and paste it in the Certificate Fingerprint field.
• Click the Save to save the Single Sign-On (SSO) SAML settings.
• Copy Assertion Consumer Service(ACS) URL and keep it handy you will need it at the time of plugin configuration (Highlighted in the below image)
  
  
• Click on Install App

• Once the application is successfully install, then click on Continue

• Copy and Save the Deskpro IDP metadata details which required while configuring Joomla as SP

2. Configure Joomla as Identity Provider

• Now go to Components miniOrange Joomla IDP Service Provider

• Navigate to the Service Provider tab and complete the fields for Service Provider Name, SP Entity ID or Issuer, ACS URL, and NameID Format. Refer to this step to get Service Provider details. Fill in the other fields according to your requirements. Click on Save.

Enter the following values:

Service Provider Name	Choose appropriate name according to your choice.
SP Entity ID or Issuer	Service Provider Entity ID.
ACS URL	SP Assertion Consumer Service URL.
X.509 Certificate (optional) [For Signed Request]	Paste certificate value you copied from the Metadata file.
NameID Format	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.
Assertion Signed	Checked.


• Now click on Advance Mapping tab. Select the NameID Attribute and then click on Save Button.


You have successfully completed your miniOrange SAML 2.0 IDP configurations.

3. Attribute Mapping (Premium Feature)

• In the miniOrange Joomla IDP plugin, navigate to the Advance Mapping tab.
• Here, you can configure Custom attribute mapping and also add additional User Attributes.

You have successfully configured Single Sign-On with Deskpro as Service Provider and Joomla as Identity Provider. If you require any further support or, if you are facing any difficulty please mail us on joomlasupport@xecurify.com

Free Trial

If you would like to test out the plugin to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at joomlasupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources.

• What is Single Sign-On (SSO)
• What is SAML?
• Additional SAML IDP guides
• Frequently Asked Questions (FAQs)