Login into Salesforce Using Magento Credentials | Magento as IDP Single Sign-On (SSO) in Salesforce

• Purchase the miniOrange Magento IDP Single Sign-On extension from magento marketplace.
• Go to My profile -> My Purchases
• Please ensure you are using correct access keys (My Profile - Access Keys)
• Paste the access keys in your auth.json file inside your project
• Use the below command to add the extension to your project.

  "composer require {module_name}:{version}"

• You can see the module name and list of versions in the selector below the extension module name.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:upgrade

Step 1. Prerequisites

• Open a new browser tab or window, Log in to your Salesforce account as Account Admin.
• Select either Salesforce Classic: Navigate to Setup > Security Controls > Single Sign-On Settings.

• Or Salesforce Lightening Experience: Click the gear icon, then navigate to Setup > Identity > Single Sign-On Settings.

• On the Single Sign-On Settings page, click on Edit.

• Check the SAML Enabled box to enable the use of SAML Single-Sign On, then click on Save.

• Click New to open SAML Single Sign-On Settings.

• Configure the following details as given below:

• Click on Save.

• Copy your Login URL value.

Step 2. Configuring Magento as SAML Identity Provider (IdP)

• In the miniOrange IDP (Identity Provider) extension, go to Applications tab.

• Search for Salesforce in the choose application searchbox and select the application.

• Enter the Application name under SP Name.

• Now, enter the SP Entity ID or Issuer and ACS URL copied earlier and save the details.

Step 3. Configure Salesforce as Service Provider

• Navigate to the Applications tab and click on Metadata settings for the Salesforce application

• Here, you can find the Identity Provider Metadata URL /XML Metadata or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate. You can also download the IdP Metadata XML file which will be used for Salesforce configuration.

• You will now have 3 options to provide the IDP Metadata to Salesforce by downloading the XML Metadata, Metadata URL or providing the detials manually.
• Option 1 - Download the XML Metadata.
• Download the XML Metadata by clicking it on Download XML Metadata button.

• Navigate to your Salesforce and upload the XML metadata file downloaded and click on the Fetch Metadata button.
• Option 2 - Metadata URL.
• You can also copy the Metadata URL and provide it to your service provider to fetch the metadata.

• Option 3 - Provide the details manually to the Salesforce.
• Copy the metadata details according to the table below.



IDP-EntityID / Issuer	IDP-EntityID / Issuer
Single Sign On URL	SAML Login URL / Passive Login URL
SAML X509 Certificate	Certificate

• Navigate to your Salesforce and paste the metadata details.

Step 4. Attribute Mapping *(This is a Premium Feature)

• In the miniOrange Magento IDP extension, navigate to the Applications tab and click on Edit settings for the Salesforce application.

• Click on Add Attribute button.

• Add the attribute name you want to send to your service provider and select the attribute from the dropdown menu and click on Save Button to save changes.

You have successfully configured the SSO between Salesforce as SAML SP and Magento as SAML IDP.