Odoo Keycloak Single Sign-On using Keycloak as IDP | Odoo Keycloak Login

The Odoo SAML SSO plugin leverages the SAML 2.0 protocol to allow users to use their Keycloak credentials for a seamless Odoo Keycloak Login via SSO. Facilitating Keycloak SSO enables users to authenticate against their Keycloak credentials and securely access your Odoo site. This step-by-step setup guide will help you configure Keycloak as Identity Provider (IDP) and Odoo as Service Provider (SP) to achieve Keycloak Odoo SSO. To know more about other features we provide in Odoo SAML Single Sign-On (SSO) plugin, you can click here.

Prerequisites: Download and Installation

• An Odoo installation on your environment.
• Installed miniOrange SAML SSO module for Odoo.

Steps to configure Odoo SSO (Single Sign-On) using SAML Provider

• Go to KeyCloak to create a new client.

• Fill in the configuration details as follows:

Client Type :	SAML
Client ID :	https://<your-domain>/miniorange-saml-sp/initiate


• Click Next.

Home URL :	http://<your-domain>/miniorange-saml-sp/acs
Valid redirect URIs :	http://<your-domain>/miniorange-saml-sp/acs
Valid post logout redirect URIs :	http://<your-domain>/miniorange-saml-sp/logout


• Click on Save.
• Configure the following settings.

• UnCheck the Client signature required in Keys tab.

• Go to Advanced Tab and make the following configuration then Click on Save button.

• Go to Client Scopes and Click on Add Predefined Mapper.

• Click on the added scope and then select the username to give it a suitable attribute name. Example: Here we have SAML Attribute Name as “surname” for Last Name.

• Go to SAML meta data in Realm Settings tab.

• Copy the entityID, Single Logout Service URL, and Single Sign-On Service certificate which will be needed in Odoo Module.
• Now, Go to your Odoo where you have installed the miniOrange SAML SSO module.

• Fill the form as follows:

Identity Provider Name :	Fill it according to your desire
IdP Entity ID :	Copied from Step 12
sign SSO and SLO Requests :	Check the box
SAML Login URL :	Copied from Step 12
Certificate :	Copied from Step 12
SAML Logout URL :	Copied from Step 12
Attribute Mapping
a)Username :	As configured in step 10
b)Email :	As configured in step 10
c)Display Name :	As configured in step 10

• Now go to Odoo Login Page.

• Click on KeyCloak.

• Enter your KeyCloak User Credentials and Click Sign In. You will be logged in into your Odoo.

• You have successfully configured WordPress (WP) as SAML SP for achieving Keycloak login into WordPress (WP) Site.

In this Guide, you have successfully configured Keycloak Single Sign-On (Keycloak Odoo SSO / Odoo Keycloak Login), choosing Keycloak as IdP and Odoo as SP. Odoo SAML Single Sign-On – SSO module solution ensures that you are ready to roll out secure access/login into Odoo site using Keycloak login credentials.

Feel free to reach out to us at odoosupport@xecurify.com with your questions and queries.