SAML Single Sign-On (SSO) into Slack using Joomla IDP Plugin

Overview

Single Sign-On in Slack using Joomla IDP allows users to log in to Frontline Education using Joomla by configuring Slack as a Service Provider (SP) and Joomla as a SAML Identity Provider (IDP). This guide will take you through a step-by-step process to configure SSO between the two platforms.

What is Slack?
Slack is a team collaboration and communication platform that organizes conversations into channels for different teams, projects, or topics, and offers direct messaging for private chats. It integrates with numerous other tools like Google Drive and Trello, enabling streamlined workflows. Key features include file sharing, powerful search capabilities, customizable notifications, and built-in video and voice calling, making it a comprehensive solution for improving internal communication and productivity in organizations of all sizes.

Download Plugin

Pricing Plans

Free Trial

Install Joomla SAML IDP Plugin

Login into your Joomla site’s Administrator console.
From left toggle menu, click on System, then under Install section click on Extensions.
Now click on Or Browse for file button to locate and install the plugin file downloaded earlier.

Installation of plugin is successful. Now click on Start Using miniOrange SAML IDP Plugin to configure miniOrange Joomla IDP plugin.

Go to the miniOrange Joomla IDP plugin, navigate to the Identity Provider tab.
Here, you can find the Identity Provider Metadata XML URL/File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), and Certificate for SP configuration. Download the XML Metadata by clicking on the button as shown below.

Configuration Steps

In this setup, Joomla serves as the repository for storing users i.e. it will act as the IDP while Slack is where users will log in using their credentials from Joomla where Joomla SAML IDP SSO Plugin will be installed.

Step 1: Configure Slack as SP (Service Provider)

Log in to your Slack account as Account Admin.
Go to Settings & administration and select Workplace settings.

Login using Joomla in to Slack | Slack Single Sign-On SSO using Joomla

Select Authentication and click on Configure for SAML Authentication.

Enter the following values in the respective fields:

SAML 2.0 Endpoint (HTTP)	You can find this in IDP Metadata tab as SAML Login URL
Identity Provider Issuer	You can find this in IDP Metadata tab as IDP-EntityID
Public Certificate	You can find this in IDP Metadata tab as Certificate

Login using Joomla in to Slack | Slack Single Sign-On SSO using Joomla, fields fulfilled

Under Advanced Options, use the default value for the Service Provider Issuer, it must be https://slack.com.

Login using Joomla in to Slack | Slack Single Sign-On SSO using Joomla, Use the default values

Under Settings, select the desired options for SAML Authentication for users and workspace.

Note: It's recommended to use 'It’s optional' for the Authentication for your workspace must be used by until the SAML configuration is fully tested. This will allow you to use both – username/password and SAML authentication options.

Click on Save Configuration.

Step 2: Configure Joomla as IDP (Identity Provider)

Now go to Components -> miniOrange Joomla IDP -> Service Provider.

miniOrange Joomla IDP Service Provider tab

Navigate to the Service Provider tab and complete the fields for Service Provider Name, SP Entity ID or Issuer, ACS URL, and NameID Format. Refer to this step to get Service Provider details. Fill in the other fields according to your requirements. Click on Save.

Enter the following values:

Service Provider Name	Choose appropriate name according to your choice
SP Entity ID or Issuer	Service Provider Entity ID
ACS URL	SP Assertion Consumer Service URL
X.509 Certificate (optional) [For Signed Request]	Paste certificate value you copied from the Metadata file
NameID Format	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

Now click on Advance Mapping tab. Select the NameID Attribute and then click on Save Button.

You have successfully completed your miniOrange Joomla SAML 2.0 IDP configurations.

Step 3: Attribute Mapping - Premium Feature

In the miniOrange Joomla IDP plugin, navigate to the Advance Mapping tab.
Here, you can configure Custom attribute mapping and also add additional User Attributes.

You have successfully configured Single Sign-On with Slack as Service Provider and Joomla as Identity Provider. If you require any further support or, if you are facing any difficulty please mail us on joomlasupport@xecurify.com

Contents