Magento 2
Single Sign-On (SSO)

The extension works with any identity provider that supports the SAML 2.0, OAuth 2.0, or OpenID Connect standards. This includes Azure AD (Microsoft Entra ID), Okta, Keycloak, Salesforce, Google, Auth0, ADFS, PingFederate, OneLogin and many more. If your IdP supports one of these protocols, it will work with your Magento store.

Yes. You can enable Single Sign-On for both Magento storefront customer logins as well as backend admin logins. This makes the extension a fit for B2B portals and workflows (where employees or partners log in via the corporate IdP) as well as B2C stores using a customer identity platform.

No. With auto-create users (Just-in-Time provisioning) enabled, a Magento/Adobe Commerce account is automatically created the first time a user logs in through SSO, with profile details, roles, and customer groups assigned based on your attribute and group mapping configuration.

Yes. The Auto-redirect option sends users directly to your identity provider's login page, bypassing the default Magento/Adobe Commerce login form entirely. This lets you enforce your organization's central authentication policies for every login.

No. The miniOrange SSO extension for Magento 2 operates entirely within your own server environment. No user credentials, SAML assertions, or OAuth tokens are transmitted to or stored on miniOrange servers. All authentication data flows directly between your Magento store and your Identity Provider.

Yes. You can configure Single Sign-On across multiple Magento 2 subsites and store views from a single installation, so users authenticate once and access all your stores seamlessly.

Single Sign-On lets your customers and admins log in to your Magento/Adobe Commerce store with credentials they already use, instead of creating and remembering another password. This reduces login friction and abandoned sign-ins, cuts down password-reset support requests, and improves security by centralizing authentication with your Identity Provider. For B2B stores, it also makes onboarding partner companies far easier, since their users get instant access through their own corporate IdP.

Yes. You can set up multiple providers at the same time — useful for B2B stores where different customers or partner companies use different login systems. Each one can have its own settings and login button.

Most stores are up and running in about 15–30 minutes. You install the extension, exchange metadata with your identity provider, and test the login. Step-by-step setup guides are available for all major IdPs, and our support team is happy to assist over a call or screen-share session if you need help.

Our End User License Agreement (EULA) covers the licensing terms and conditions of use for the extension, and our Service Level Agreement (SLA) outlines our support commitments, response times, and upgrade policies.