SAML Single Sign-On (SSO) into Drupal using Gluu Server as IdP

Overview

The Drupal SAML integration using the miniOrange SAML SP module establishes seamless SSO between Gluu Server and the Drupal site. The users will be able to log in to the Drupal site using their Gluu credentials. This document will walk you through the steps to configure Single Sign-On - SSO between Drupal as a Service Provider (SP) and Gluu as an Identity Provider (IdP). The module is compatible with with Drupal 7, Drupal 8, Drupal 9, Drupal 10 and Drupal 11.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  Composer require 'drupal/miniorange_saml'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Service Provider using the search box.
• Enable the module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml/idp_setup

• Install the module:

  drush en drupal/miniorange_saml

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml/idp_setup

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the Drupal SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml/idp_setup

Configuration Steps

Drupal SAML SP Metadata

• Go to Configuration → People → SAML Login Configuration in the Administration menu. (/admin/config/people/miniorange_saml/idp_setup)

• Navigate to the Service Provider Metadata and download the metadata. (This is required in configuring the Gluu Server as a SAML IdP)

Configure SAML Single Sign-On Application in Gluu Server

• Login to Gluu server admin console.
• From the navigation panel, click on SAMLAdd Trust Relationships.

• Configure the following in Trust Relationship Form:
• Display Name: Drupal SAML App (Enter any name for identifying the application)
• Description: Provide a suitable description for you application
• Entity Type: Single SP
• Metadata Location: File

• Upload the Metadata file in SP Metadata File.
• Now tick the Configure Relying Party checkbox and click on Configure Relying Party link.

• You will be shown the Relying Party Configurations page.
• From Available Profile Configurations, select SAML 2.0 SSO and click on Add to add SAML2SSO to Selected Profile Configurations.

• In SAML 2.0 SSO Profile, configure the following:

signAssertions	Never
signRequests	Conditional
encryptAssertions	Conditional
defaultAuthenticationMethods	None
Support Unspecified NameId Format	Tick the checkbox

• From Available NamedId Formats, select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress and urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified and add it to the Selected NamedId Formats.
• Click on Save button.

• From the Release Additional Attributes section on the right, add the attributes you want to send to the Service Provider.
• Click on Update button.

Configure Drupal as Service Provider:

• Open your Drupal site. Go to the Service Provider Setup tab of the module.
• Click on Upload IDP Metadata Section.
• Now upload the metadata file downloaded from the Gluu Server IdP.

• Click on the Test link to test the connection between Drupal and Gluu Server.

• In the test configuration window, a success message with SAML response attributes will appear if the configurations are correct; otherwise, error messages with additional troubleshooting instructions will appear. Click on Done.

Congratulations! You have successfully configured Gluu Server as an Identity Provider and Drupal as a Service Provider.

How does SAML SSO login work?

• Open a new browser/private window and navigate to the Drupal site login page.
• Click the Login using Identity Provider (Gluu Server) link.
• You will be redirected to the Gluu Server login page. Enter the Gluu Server credentials. After successful authentication, the user will be redirected back to the Drupal site.