SimpleSAML as IDP for Moodle

Step 1: Setup SimpleSAML as Identity Provider

Follow the steps below to configure SimpleSAML as IdP

 Configure SimpleSAML as IdP

• In the miniOrange SAML 2.0 SSO plugin, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure the Identity Provider.

• In config/config.php, make sure that 'enable.saml20-idp' is true. Example: ‘enable.saml20-idp’ => true
• In metadata/saml20-idp-hosted.php, configure SimpleSAML as Identity Provider like this: $metadata['__DYNAMIC:1__'] = [
    'host' => '__DEFAULT__',
    /* X.509 key and certificate. Relative to the cert directory.*/
    'privatekey' => '<YOUR_PRIVATE_KEY_FILE_NAME>',    //eg. RSA_Private_Key.pem
    'certificate' => '<YOUR_PUBLIC_KEY_FILE_NAME>',    //eg. RSA_Public_Key.cer
    /* Authentication source to use. Configured in 'config/authsources.php'. */
    'auth' => '<YOUR_AUTH_SOURCE_NAME>'
];
• In metadata/saml20-sp-remote.php, register your Servider Provider like this:
  /* Replace example.com with your wordpress domain name. */
  $metadata['https://example.com/miniorange-saml-20-single-sign-on/'] = [
    'AssertionConsumerService' => 'https://example.com/',
    'SingleLogoutService' => 'https://example.com/',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
    'simplesaml.nameidattribute' => 'mail',
    'simplesaml.attributes' => true,
    'attributes' => array('mail', 'givenname', 'sn', 'memberOf'),
];
• Here, you can also add user attributes you want to send from SimpleSAML to your Service Provider i.e WordPress.
• Go to SimpleSAMLphp homepage of installation.
  The URL of an installation can be e.g.: https://service.example.com/simplesaml/ where service.example.com has to be replaced by your SimpleSAMLphp path. (Note: The installation page URL may differ depending on how SimpleSAML installation has been done)
• Now go to Federation Tab and click on Show Metadata for SAML 2.0 IdP Metadata.

• You can get the IdP metadata from here which will be required to configure the plugin.