SAML Single Sign-On (SSO) into Zoho using Joomla IDP Plugin

Overview

Single Sign-On in Zoho using Joomla IDP allows users to log in to Zoho using Joomla by configuring Zoho as a Service Provider (SP) and Joomla as a SAML Identity Provider (IDP). This guide will take you through a step-by-step process to configure SSO between the two platforms.

What is Zoho?
Zoho helps you create, manage, and organize data in a way that drives sales and revenue. You can create connections, log sales activities, add notes, create tasks, qualify leads, view deals, and more with Zoho's multipurpose digital contact book.

Note: Premium Version of Zoho is required to set up SSO.

Configuration Steps

Validate your Zoho domain (skip this step if you already have a verified Zoho domain)

Step 1: Configure Zoho as SP (Service Provider)

• Login to your Zoho account and access Zoho Mail.
• Click on Control Panel and select Mail and Docs.

• Go to Domains, click on Add Domain and add your domain.

• In the list, click the icon under the Verified column for your domain to validate it.

• Follow the steps specified on the page that opens up and after that click on Verify to validate your domain.

Step 2: Configure Zoho as Service Provider

• Go to the miniOrange Joomla IDP plugin, navigate to the Identity Provider tab.
• Here, you can find the Identity Provider Metadata XML URL/File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), and Certificate for SP configuration. Download the XML Metadata by clicking on the button as shown below.

• Open a new browser tab or window, Login to Zoho Accounts at Zoho as a user with administrative rights.
• Navigate to Organization.
• Select SAML Authentication and click on Setup Now.

• Switch back to the tab / window with the IDP Metadata. Enter the information into the corresponding fields.

Sign-in URL	Copy and paste the SAML Login URL.
Sign out URL	Copy and paste the SAML Logout URL.
Algorithm	RSA
X.509 Certificate	Download the certificate. Upload it here.

• Click on Configure to save the SAML Single Sign On (SSO) settings.

• Click on Download to download the metadata file. You can use this metadata file to configure the plugin.

Step 3: Configure Joomla as IDP (Identity Provider)

• Now go to Components -> miniOrange Joomla IDP -> Service Provider.

• Navigate to the Service Provider tab and complete the fields for Service Provider Name, SP Entity ID or Issuer, ACS URL, and NameID Format. Refer to this step to get Service Provider details. Fill in the other fields according to your requirements. Click on Save.

Enter the following values:

Service Provider Name	Choose appropriate name according to your choice
SP Entity ID or Issuer	Service Provider Entity ID
ACS URL	SP Assertion Consumer Service URL
X.509 Certificate (optional) [For Signed Request]	Paste certificate value you copied from the Metadata file
NameID Format	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

• Now click on Advance Mapping tab. Select the NameID Attribute and then click on Save Button.

• You have successfully completed your miniOrange Joomla SAML 2.0 IDP configurations.

Step 4: Attribute Mapping - Premium Feature

• In the miniOrange Joomla IDP plugin, navigate to the Advance Mapping tab.
• Here, you can configure Custom attribute mapping and also add additional User Attributes.

You have successfully configured Single Sign-On with Zoho as Service Provider and Joomla as Identity Provider. If you require any further support or, if you are facing any difficulty please mail us on joomlasupport@xecurify.com

Related Articles

• What is Single Sign-On (SSO)?
• What is SAML?
• Frequently Asked Questions (FAQs)