Drupal SAML SimpleSAMLphp SSO setup will allow your user to login to your Drupal site using their SimpleSAMLphp Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers ( IDP ). Here we will go through a guide to configure SAML SSO between Drupal and SimpleSAMLphp Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.
If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module.
Know more about Drupal SAML Single Sign On - Service Provider module from here.
You can download the SAML Single Sign On - Service Provider module from here.
This detailed Handbook for the SAML Single Sign On - Service Provider module, gives an in depth explanation of the features of the module. You can refer to the handbook at anytime - it is always available to you, either via This link, or directly from the module for quicker access.
Composer require drupal/miniorange_saml
{BaseURL}/admin/config/people/miniorange_saml/idp_setupdrush dl drupal/miniorange_saml
drush en drupal/miniorange_saml
drush cr
{BaseURL}/admin/config/people/miniorange_saml/idp_setup{BaseURL}/admin/config/people/miniorange_saml/idp_setup
| Single Sign-On Service URL | Identity Provider Sign-in URL from Identity Provider Info in your Simple SAML APP. |
| IdP Entity ID or Issuer | Issuer from Identity Provider Info in your Simple SAML App |
| X.509 Certificate: | Open the .cer certificate file in notepad and copy/paste the entire content of the file. |
Follow the steps below to configure SimpleSAMLphp as IdP
Configure SimpleSAMLphp as IdP
<?php
$config = [
'example-userpass' => [
'exampleauth:UserPass',
'student:studentpass' => [
'uid' => ['student'],
'eduPersonAffiliation' => ['member', 'student'],
],
'employee:employeepass' => [
'uid' => ['employee'],
'eduPersonAffiliation' => ['member', 'employee'],
],
],
];
[
'uid' => ['student'],
'eduPersonAffiliation' => ['member', 'student'],
],
openssl req -newkey rsa:3072 -new -x509 -days 3652 -nodes -out example.org.crt -keyout example.org.pem
The certificate above will be valid for 10 years.
example.org.crt //(Public Key)
example.org.pem //(Private Key)
<?php
$metadata['__DYNAMIC:1__'] = [
/*
* The hostname for this IdP. This makes it possible to run multiple
* IdPs from the same configuration. '__DEFAULT__' means that this one
* should be used by default.
*/
'host' => '__DEFAULT__',
/*
* The private key and certificate to use when signing responses.
* These are stored in the cert-directory.
*/
'privatekey' => 'example.org.pem',
'certificate' => 'example.org.crt',
/*
* The authentication source which should be used to authenticate the
* user. This must match one of the entries in config/authsources.php.
*/
'auth' => '' Example:- 'example-userpass', // You can find this in Step Number 3
];
<?php
$metadata['https://example.com/plugins/authentication/miniorangesaml/'] = [
'AssertionConsumerService' => 'https://example.com/samlassertion',
'SingleLogoutService' => 'https://example.com/user/logout',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
'simplesaml.nameidattribute' => 'mail',
'simplesaml.attributes' => true,
'attributes' => array('mail', 'givenname', 'sn', 'memberOf'),
];
If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP modules.
Need Help? We are right here!
