Magento Salesforce Single Sign-On (SSO) | Login into Magento using Salesforce

Integration of Salesforce Login ( Salesforce SSO ) with Magento using OAuth 2.0 Protocol. The Magento OAuth / OpenID Connect Single Sign-On (SSO) extension allows the users to log in to the Drupal site using the Salesforce Credentials (Salesforce Single Sign on).

Magento Salesforce SSO extension also supports advanced Single Sign-On features such as user profile Attribute Mapping, Role Mapping, and so on. You can also configure this extension using different custom providers and standard identity providers. Here we will go through a step-by-step guide to configure Salesforce OAuth SSO login for Magento site by considering Salesforce as OAuth provider and Magento as OAuth client. Click here to read more about the Magento Salesforce OAuth Single Sign-On (OAuth & OpenID Connect Client) plugin's extra features.

OAuth / OpenID Connect Single Sign On – SSO (OAuth Client)

By miniOrange

(1)

Magento OAuth OpenID Connect SSO extension allows login (Single Sign-On) into Magento with your Azure AD, Azure B2C, AWS Cognito, WSO2, Okta, LinkedIn, Google, Facebook, Slack, Discord or other custom OAuth 2.0 providers [24/7 SUPPORT]

 Tested with 2.4.5

Get this plugin

Steps to configure Salesforce OAuth & OpenID Single Sign-On (SSO) Login into Magento

1. Setup Salesforce as OAuth Provider

Follow the steps below to configure Salesforce as OAuth Provider

 Configure Salesforce as OAuth Provider

• Login to your SalesForce account.
• Switch to the SalesForce Classic mode from profile menu, and then go to the Setup page.
• From the left pane, under Build section go to Create > Apps in Salesforce.

• Scroll down and click on the New button under Connected apps.

• You will be taken to the application settings page in Salesforce. Enter the required details such as Connected App Name, API Name and Contact Email.

• Check the Enable OAuth Settings checkbox under API(Enable OAuth Settings) section in Salesforce and you will be shown more options to configure.
• Enter the Callback URL (copy it from the plugin), select the Scopes as required. Make sure that the same scopes are also added in miniOrange OAuth Client plugin and then scroll all the way to the bottom to click on Save.

• You will be taken to the Application Management page in Salesforce. Here, you will find Consumer key(Client ID) and Consumer Secret(Client Secret).

Salesforce SSO is now configured with Magento and now you can login into Magento using your Salesforce SSO login credentials.

Note: Make sure you are adding the correct salesforce domain.

1. For Salesforce application - replace {salesforce-domain} in above endpoints with https://login.salesforce.com/
2. For Salesforce community - replace the {salesforce-domain} with your salesforce community domain.

You have successfully configured Salesforce as OAuth Provider for achieving Salesforce Single Sign-On (SSO) with Magento for user authentication.

2. Configuring Magento 2 as OAuth Client

• After successfully configuring OAuth Provider, go to OAuth Provider tab and configure OAuth Provider Name, Client ID, Client Secret, Scope and provided endpoints.
  
  

  Please refer below Endpoints to configure the OAuth client

  
  

  Scope:	openid profile email
  Authorize Endpoint:	{salesforce-domain}/services/oauth2/authorize
  Access Token Endpoint:	{salesforce-domain}/services/oauth2/token
  Get User Info Endpoint:	{salesforce-domain}/services/oauth2/userinfo

• Click on the Save button to save the settings.
• Click on the Test Configuration button.

• You will see all the values returned by your OAuth Provider to Magento in a table. If you don't see value for First Name, Last Name, Email or Username, make the required settings in your OAuth Provider to return this information.

3. Sign-In Settings

• Navigate to Sign-in Settings tab. Here you find the option the enable the login link on Admin*/Customer Login Page (*Admin SSO is available in the premium versions)

• If you want to initate SSO from any page you can also use the SSO link provided in the extension.

• The Premium extension also provides you the the feature to auto redirect your user to the IdP Login Page if the user is not already logged in.

Attribute / Custom Attribute Mapping (Optional). *This is Premium feature.

1.1: Attribute Mapping (Optional). *This is Premium feature.

• You can map attributes in the Attribute Mapping tab. Only username and email are allowed to be mapped in free version of the plugin. However, in the premium version of the plugin, you can map various attributes coming from your OAuth Provider to the attributes present in your Magento site.

1.2: Custom Attribute Mapping (Optional). *This is Premium feature.

• Enter your table name in Table field.
• Enter attribute name as your column name (in the respective table)
• Click on Add button for adding custom magento attribute and map the respective field with the attribute receiving from your identity provider
• Click on save button for saving the configuration.
• You can also delete the configuration by entering the name in attribute name field and then click on delete button.

Role Mapping (Optional). *This is Premium feature.

• You can specify a default role in the free plugin that will be allocated to all non-admin users when they conduct SSO.
• Go to Attribute/Role mapping tab and navigate to Role Mapping section.
• Select the Default Role and click on the Save button.

By configuring Salesforce as an OAuth Provider and Magento as an OAuth Client using our Magento OAuth Client plugin, you have successfully installed Magento Salesforce Single Sign-On (SSO). Within minutes, you'll be able to provide safe access to your Magento site utilising Salesforce login credentials thanks to this solution.

Additional Resources

• Magento Salesforce Single Sign-On (SSO)
• What is OAuth 2.0?
• How OAuth works?
• Saleforce as OAuth Provider / OpenID Connect
• Salesforce SSO Use-Cases
• Magento OAuth and OpenID Single Sign On (SSO) Plugin.
• Magento SAML Single Sign On (SSO) Plugin.
• Magento OAuth Single Sign On (SSO) using Azure AD.