SAML Single Sign-On (SSO) for WordPress using CA Identity as IDP | CA Identity SSO Login

Overview

CA Identity Single Sign-On (SSO) login for WordPress can be achieved by using our SAML Single Sign-On (SSO) plugin. Our plugin is compatible with all the SAML compliant Identity Providers. Here we will go through a step-by-step guide to configure SSO login between Wordpress site and CA Identity by considering CA Identity as IdP (Identity Provider) and WordPress as SP (Service Provider).

You can visit our SSO plugin to know more about the other features we provide.

Pre-requisites : Download And Installation

To configure CA Identity as SAML IdP with WordPress, you will need to install the miniOrange SAML SP SSO plugin for WP.

Configuration Steps

1. Setup CA Identity as IdP (Identity Provider)

Follow the following steps to Configure CA Identity as IdP:

Configure CA Identity as IdP

• In the miniOrange SAML SP SSO plugin, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure the Identity Provider.

Note: For Single Sign On, make sure to install and setup CA SSO (formerly known as SiteMinder) with CA Identity Manager.

• Log in to your CA SSO portal as a CA Single Sign-On administrator.
• Click on Federation tab.
• Now go to Partnership Federation Entities.

Create a Local Identity Provider

• Click on Create Entity.

• To create a local entity, configure the following:

Entity Location	Local
Entity Type	SAML2 IDP
Entity ID	Enter an ID for your local Identity Provider for identification.
Entity Name	Create a name for your local Identity Provider.
Base URL	Enter the fully-qualified domain name for the host service CA SSO Federation Web Services.
Signed Authentication Requests Required	No
Supported NameID format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

Create a Remote Service Provider

• Download Metadata XML File from the Service Provider Metadata Tab of the miniOrange SAML SSO plugin.
• Click on Import Metadata and upload the downloaded XML metadata file.

• For Import As, select Remote Entity.
• Provide a Name for the Remote Service Provider Entity.

Create a Partnership between SP and IDP

• For creating a partnership, configure the following:

Add Partnership Name	Enter a name for your partnership.
(Optional) Description	Enter a relevant description for your partnership.
Local IDP ID	Enter the Local Identity Provider ID created while adding a Local Entity.
Remote SP ID	Enter the Remote Service Provider ID created while adding a Remote Entity.
Base URL	This field will be pre-populated.
Skew Time	Enter any skew time required by your environment.
User Directories and Search Order	Select the required directories in the required search order.

• On the Federation Users page, add the users you want to include in the partnership.
• In the Assertion Configuration section, configure following:
• Name ID Format: Email Address
• Name ID Type: User Attribute
• Value: mail
• (Optional) Assertion Attributes: Specify any application or group attributes that you want to map to users

• In the SSO and SLO section, perform the following steps:
• SSO Binding: HTTP-POST
• Transactions Allowed: Both IDP and SP initiated

In the Signature and Encryption section, select Post Signature as Sign Both.

Activate Partnership

• In the Federation Partnership List, expand the Action dropdown for your partnership and click Activate.
• To get the IDP metadata, Click the Action button and click Export Metadata. This data will be used to configure the plugin.

You have successfully configured CA Identity as SAML IdP (Identity Provider) for achieving CA Identity SSO login into your WordPress (WP) Site.

You have successfully configured WordPress (WP) as SAML SP for achieving CA Identity SSO login into your WordPress (WP) Site.

In this Guide, you have successfully configured CA Identity SAML Single Sign-On (CA Identity SSO Login) choosing CA Identity as IdP and WordPress as SP using miniOrange plugin-SAML Single Sign On – SSO Login. This solution ensures that you are ready to roll out secure access to your WordPress (WP) site using CA Identity login credentials within minutes.

Related Articles

• What is Single Sign-On (SSO)?
• What is SAML?
• How we are different?
• Frequently Asked Questions (FAQs)