SAML Single Sign On (SSO) into Drupal using PhenixID as Identity Provider

Drupal SAML PhenixID SSO (Single Sign-On) setup will allow your user to login to your Drupal site using their PhenixID Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers (IdP). We provide Drupal SAML Single Sign on - Service Provider module which is compatible with Drupal 7, Drupal 8 Drupal 9, and Drupal 10. Here we will go through a guide to configure SAML SSO between Drupal and PhenixID as Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.

If you have any queries or if you need any sort of assistance in configuring the module, you can contact us at drupalsupport@xecurify.com. If you want, we can also schedule an online meeting to help you configure the Drupal SAML Single Sign-On - SAML Service Provider module.

Steps to configure PhenixID SAML Single Sign-On (SSO) Login into Drupal site

1. Configure PhenixID as SAML IdP (Identity Provider)

Follow the steps to configure PhenixID as IDP

  Add Service Provider

• In the miniOrange SAML SP SSO module, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS URL which are required to configure the Identity Provider.

• Login to the PhenixID server admin console with your credentials.
• Navigate to Scenarios tab and then click on Federation.

• In the left pane, scroll down then select SAML Metadata Upload and click on + sign.
• In the Metadata tab, enter the application NAME and DESCRIPTION (optional).

• Upload the metadata file or paste the metadata URL. You can get the metadata file or URL from the step above.

• Then click on Verify and show.

  Configure Username and Password

• In the left pane, select Username and Password.
• Click on + sign to provide IDP NAME and DESCRIPTION (Optional) then click on Next.

• In the CONNECTION tab, select Create New then proceed to Next page.

• Choose the required Connection Type from the SELECT CONNECTION TYPE dropdown.

• Give your connection a NAME and DESCRIPTION (Optional) and then click on Next.

• In the Driver tab, select the database driver according to your database and proceed to next screen.

• Under CONNECTION DETAILS enter your database HOST.

• Enter your DATABASE NAME.

• The console will now provide you with your database connection URL, verify it and click on Next.

• Under the Credentials tab enter your database Username and Password.


 Configure the Database

• In the JDBC SEARCH SETTINGS tab, provide the database query required for mapping the attributes.
• Make sure that attributes givenName, mail and sn are returned in the query then click on Next.

• Now create an Entity ID for your IDP and make sure it is unique.
• Also provide a POST SSO URL in the format specified.

• Next screen will show you the Keystore tab, you can choose Keystore of your choice or can keep it as a default.
• Click on Next.

• In the Attributes tab, enter the User Identifier attribute and additional attributes if there are any and proceed to the next screen.

• Select the SP you previously set up as Default SP from the dropdown.

• Click on Create to complete the setup.

• You can find your IDP listed on sidebar as submenu to Username and Password.
• Select your IDP name, then navigate to the IDENTITY PROVIDER tab and click on View SAML Metadata to save the metadata XML file.

• Switch to the EXECUTION FLOW tab, select Find User and Validate Password.
• Click on Prepared Statement Executor Valve and provide the attributes givenName, mail and sn Attributes box and click on Save.


You have successfully configured PhenixID as SAML IdP (Identity Provider) for achieving PhenixID SSO login into your Drupal Site.

2. Configure Drupal as SAML Service Provider

• In miniOrange SAML module, go to Service Provider Setup tab. There are two ways to configure the module:

 By Uploading PhenixID IDP Metadata File:

• Click on Upload IDP Metadata.
• Enter the Metadata URL and click on Fetch Metadata
• Upload metadata file and click on Upload File button.


 Manual Configuration :

• Provide the required settings (i.e. Identity Provider Name, IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate) as provided by your Identity Provider and click on the Save button.

Once you are done with configuration steps, click on the Test Configuration button.



If the test configuration is successful the module is successfully configured. If you face any issues in test configuration you can reach us at drupalsupport@xecurify.com with the screenshot of the test configuration window.

24*7 Active Support:

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP 2.0 Single Sign On (SSO) login module.

Free Trial:

If you would like to test out the module to ensure your business use case is fulfilled, we do provide a 7-day trial. Please drop us an email at drupalsupport@xecurify.com requesting a trial. You can create an account with us using this link.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• What is SSO? How works SAML SSO authentication?
• Frequently Asked Questions (FAQs)

Our Other modules:

SAML SP  |  SAML IDP  |   User Provisioning & Sync  |   Two-Factor Authentication  |   Passwordless Authentication  |   OAuth/OIDC Client  |  LDAP / AD Login  |  OAuth Server  |  Decoupled / Headless Authentication  |  OTP Verification  |  Website Security  |  Rest API Authentication  |  SCIM User Provisioning