SAML Single Sign On (SSO) into Drupal using SecureAuth as IdP

Drupal SAML SecureAuth SSO setup will allow the user to login to Drupal site using their SecureAuth Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-On for Drupal. This module is compatible with all SAML Identity Providers (IDP). We provide Drupal SAML SP 2.0 Single Sign on (SSO) - SAML Service Provider module which is compatible with Drupal 7, Drupal 8 Drupal 9 as well as Drupal 10. This guide will walk you through the steps to configure SAML SSO between Drupal and SecureAuth IDP.

Steps to configure SecureAuth SAML Single Sign-On (SSO) Login into Drupal site

1. Configure SecureAuth as SAML IdP (Identity Provider)

Follow the steps to configure SecureAuth as IDP

• In the miniOrange SAML SP SSO module, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure the Identity Provider.

• Log in to your SecureAuth IDP Admin console.
• Now go to Post Authentication tab.
• In the Post Authentication section, set Authenticated User Redirect to SAML 2.0 (SP Initiated) Assertion.
  
  
• In the User ID Mapping section, make the following entries:

  User ID Mapping	Set to Email 1.
  Name ID Format	Set to urn:oasis:names:tc:SAML:2.0:nameid-format-unspecified.
  Encode to Base64	Set to False.

  
• In the SAML Assertion / WS Federation section, make the following entries:
  
  

  WSFed Reply To /SAML Target URL	Enter ACS (Assertion Consumer Service) URL from Service Provider Metadata tab of the module
  SAML Consumer URL	Enter SP Entity ID / Issuer from Service Provider Metadata tab of the module
  WSFed/SAML Issuer	Enter unique name that identifies the SecureAuth IDP to the application (as the SAML ID). This value is shared with the application and can be any word, phrase, or URL, but must match exactly in the SecureAuth IDP and Drupal configurations. For example, https://secureauthfqdn/realm12
  SAML Recipient	Enter Recipient URL from Service Provider Metadata tab of the module
  Sign SAML Assertion	Set Sign SAML Assertion to True.
  Sign SAML Message	Set Sign SAML Message to False.

  
• Leave the default value in the Signing Cert Serial Number field
• Set the Domain to the SecureAuth IDP appliance URL or IP Address to download the metadata file. For example, https://secureauthfqdn


• Click on Download link to download the SecureAuth IDP metadata file or note down the given information and keep it handy to configure the Service Provider.
  
  

You have successfully configured SecureAuth as SAML IDP (Identity Provider) for achieving SecureAuth SSO login into your Drupal Site.

2. Configuring Drupal as Service Provider

• In miniOrange SAML module, go to Service Provider Setup tab. There are two ways to configure the module:

 By Uploading SecureAuth IDP Metadata File:

• Click on Upload IDP Metadata.
• Enter the Metadata URL and click on Fetch Metadata button.
• Upload metadata file and click on Upload File button.


 Manual Configuration :

• Provide the required settings (i.e. Identity Provider Name, IDP Entity ID or Issuer, SAML Login URL, X.509 Certificate) as provided by your Identity Provider and click on the Save button.
• Once you are done with configuration steps, click on the Test Configuration button.

If the test configuration is successful the module is successfully configured. If you face any issues in test configuration you can reach us at drupalsupport@xecurify.com with the screenshot of the test configuration window.