SAML Single Sign-On (SSO) into Salesforce using Joomla as IDP
Single Sign-On in Salesforce using Joomla IDP allows users to log in to Salesforce using Joomla by configuring Salesforce as a Service Provider (SP) and Joomla as a SAML Identity Provider (IDP). This guide will take you through a step-by-step process to configure SSO between the two platforms.
What is Salesforce?
Salesforce is a cloud-based software company that provides businesses with tools that help them find more prospects,
close more deals, and provide a higher level of service to their customers.
Pre-requisites: Download And Installation
Install Joomla IDP Plugin
- Download the zip file for the miniOrange Joomla IDP plugin.
- Log into your Joomla site’s administrator console.
- From left toggle menu, click on System, then under Install section click on Extensions.
- Upload the downloaded zip file to install the Joomla IDP plugin.
- Installation of the plugin is successful. Now click on Start Using miniOrange SAML IDP Plugin to configure miniOrange Joomla IDP plugin.
Steps to configure Salesforce SSO with Joomla as IDP.
1. Configure Salesforce as Service Provider
- Go to the miniOrange Joomla IDP plugin, navigate to the Identity Provider tab.
- Here, you can find the Identity Provider Metadata XML URL/File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), and Certificate for SP configuration. Download the XML Metadata by clicking on the button as shown below.
- Open a new browser tab or window, Log in to your Salesforce account as Account Admin.
- Select either Salesforce Classic: Navigate to Setup > Security Controls > Single Sign-On Settings.
- Or Salesforce Lightening Experience: Click the gear icon, then navigate to Setup > Identity > Single Sign-On Settings.
- On the Single Sign-On Settings page, click Edit.
- Check the SAML Enabled box to enable the use of SAML Single-Sign On, then click Save.
- Click New to open SAML Single Sign-On Settings.
- Click Save.
- Copy your Login URL value.
| Name | Enter a name of your choice |
| SAML Version | Make sure this is set to 2.0. This should be enabled by default. |
| Issuer | Copy and paste the IDP-Entity URL/Issuer from IDP Metadata tab |
| Identity Provider Certificate | Download the Certificate from IDP Metadata Open it in notepad. Copy and paste the content here. |
| Identity Provider Login URL | Copy and paste the SAML Login URL from IDP Metadata tab |
| Custom Logout URL | Copy and paste the SAML Logout URL from IDP Metadata tab |
| API Name | Enter an API name of your choice. |
| Entity ID | If you have a custom domain setup,
use https://[customDomain].my.salesforce.com If you do not have a custom domain setup, use https://saml.salesforce.com |
2. Configure Joomla as Identity Provider
- Now go to Components miniOrange Joomla IDP Service Provider
- Navigate to the Service Provider tab and complete the fields for Service Provider Name, SP Entity ID or Issuer, ACS URL, and NameID Format. Refer to this step to get Service Provider details. Fill in the other fields according to your requirements. Click on Save.
- Now click on Advance Mapping tab. Select the NameID Attribute and then click on Save Button.
Enter the following values:
| Service Provider Name | Choose appropriate name according to your choice. |
| SP Entity ID or Issuer | Service Provider Entity ID. |
| ACS URL | SP Assertion Consumer Service URL. |
| X.509 Certificate (optional) [For Signed Request] | Paste certificate value you copied from the Metadata file. |
| NameID Format | Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress. |
| Assertion Signed | Checked. |
You have successfully completed your miniOrange SAML 2.0 IDP configurations.
3. Attribute Mapping (Premium Feature)
- In the miniOrange Joomla IDP plugin, navigate to the Advance Mapping tab.
- Here, you can configure Custom attribute mapping and also add additional User Attributes.
You have successfully configured Single Sign-On with Salesforce as Service Provider and Joomla as Identity Provider. If you require any further support or, if you are facing any difficulty please mail us on joomlasupport@xecurify.com
Free Trial
If you would like to test out the plugin to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at joomlasupport@xecurify.com requesting a trial. You can create an account with us using this link.
Additional Resources.
Need Help? We are right here!
