nopCommerce OAuth Single Sign-On (SSO) with ADFS as OAuth Provider

Overview

nopCommerce OAuth Single Sign-On (SSO) plugin gives the ability to enable OAuth Single Sign-On for your nopCommerce store or site using ADFS as the OAuth Provider. Using Single Sign-On you can use only one password to access your nopCommerce store or site and services. Our module is compatible with all the OAuth-compliant identity providers. Here we will go through a step-by-step guide to configure Single Sign-On (SSO) between nopCommerce and ADFS.

Pre-requisites : Download And Installation

• Download the nopCommerce OAuth Single Sign-On (SSO) module.

• To install the plugin, login as admin into your nopCommerce site or store. In the admin dashboard, navigate to Configuration Tab >> Local plugins.

• On the top right corner of the page select the Upload plugin or theme button to upload the downloaded plugin zip. Follow the instructions further to install the plugin.

Steps to configure nopCommerce OAuth Single Sign-On (SSO) using ADFS as Identity Provider

1. Configure ADFS as IDP

• To perform SSO with ADFS as Provider, your application must be https enabled.

• Navigate to Server Manager Dashboard->Tools->ADFS Management.

• Navigate to ADFS->Application Groups. Right click on Application Groups & click on Add Application group then enter Application Name. Select Server Application & click on next.

• Copy Client Identifier. This is your Client ID. Add Callback URL in Redirect URL. You can get this callback URL from miniOrange nopCommerce OAuth Single Sign-On (SSO) plugin. Click on next.

• Click on Generate shared secret. Copy the Secret value. This is your Client Secret. Click on Next.

• On the Summary screen, click Next. On the Complete screen, click Close.

• Now, right-click on the newly added Application Group and select Properties.

• Click on Add application from App Properties.

• Click on the Add application. Then select Web API and click Next.

• On the Configure Web API screen, enter the domain name address into the Identifier section. Click Add. Click Next.

• On the Choose Access Control Policy screen, select Permit everyone and click Next.

• On the Configure Application Permission, by default openid is selected as a scope. You can select email and, profile as well, then click on next.

• On the Summary screen, click Next. On the Complete screen, click Close.

• On the Sample Application Properties click OK.

You have successfully configured ADFS as OAuth Server (identity provider) for achieving SSO login into your nopCommerce application.

2. Configure nopCommerce as SP

• For configuring application in the plugin, click on the Add New IDP button in the Identity Provider Settings tab.

• Under the Configure OAuth/OIDC tab, select ADFS from the list of identity providers shown below

• When you are done configuring your identity provider, you will get client ID, client secret and all required authentication endpoints.

• Copy the Redirect/Callback URL from the plugin and provide it to your identity provider to configure it on their side.

• Fill the rest acquired details into the corresponding fields shown below and click on Save.

• Note: Please make sure the Enable SSO checkbox is ticked.

3. Testing OAuth SSO

• Click on Test Configuration to verify if you have configured the plugin correctly.

• Under the select actions click on the Test Configuration button to verify if you have configured the plugin correctly.

• On successful configuration, you will get attributes name and attribute values in the test configuration window.

4. Attribute Mapping

• Under Attribute/Role Mapping tab, map the attribute names provided by your identity provider with your nopcommerce store attributes.

• Click on Save button.

5. Adding SSO link for your nopCommerce store

• Click on Select Actions, and from the dropdown, select SSO Link to copy the SSO Link.

You can even configure the Umbraco SAML Single Sign-On (SSO) module with any identity provider such as ADFS, Azure AD, Bitium, centrify, G Suite, JBoss Keycloak, Okta, OneLogin, Salesforce, AWS Cognito, OpenAM, Oracle, PingFederate, PingOne, RSA SecureID, Shibboleth-2, Shibboleth-3, SimpleSAML, WSO2 or even with your own custom identity provider. To check other identity providers, click here.

Related Articles

• nopCommerce OAuth Single Sign-On (SSO)
• Web3 Login & NFT Gating for nopCommerce Applications
• ASP.NET SAML Single Sign-On (SSO)
• ASP.NET OAuth Single Sign-On (SSO)
• DNN OAuth Single Sign-On (SSO)
• DNN REST API Authentication
• Kentico SAML Single Sign-On (SSO)

Get in Touch

Not able to find your identity provider? Mail us on nopcommercesupport@xecurify.com and we'll help you set up SSO with your IDP and for quick guidance (via email/meeting) on your requirement and our team will help you to select the best suitable solution/plan as per your requirement.