Single Sign On (SSO)

miniOrange SAML Single Sign On (SSO) plugin acts as a SAML Service Provider which can be configured to establish trust between the plugin and SAML capable Identity Providers to securely authenticate the user to the WordPress site.

Here are the Step by Step Guides for different Identity Providers for Wordpress

IDP	Links
ADFS	Click Here
Azure AD	Click Here
Bitium	Click Here
Centrify	Click Here
G Suite	Click Here
Jboss Keycloak	Click Here
Okta	Click Here
OneLogin	Click Here
Salesforce	Click Here
AWS Cognito	Click Here

In addition to above, miniOrange also provides On-Premise IDP. Click Here to know more.

Step 1: Download and Install the plugin in Wordpress

Download the Wordpress plugin and then install the downloaded zip file by going in PluginAdd newUpload plugin.

Activate the plugin after installation.

Step 2: Register for the plugin (Without Registration you can't proceed further)

Fill in all the details marked with *those are compulsory.Please make sure you have Activated the plugin.

Step 3: Configure the plugin

Provide the required settings (i.e. Identity Provider Name, IdP Entity ID or Issuer, SAML Login URL, X.509 Certificate) and save it.

Identity Provider Name	For Example:Miniorange
IdP Entity ID or Issuer	https://auth.miniorange.com/moas
SAML Login URL	https://auth.miniorange.com/moas/idp/samlsso
X.509 Certificate	X.509 certificate is enclosed in X509Certificate tag in IdP-Metadata XML file. (parent tag: KeyDescriptor use="signing")

After filling these fields Click On SAVE button to save the details.

Step 4: Test Configuration

Click on Test configuration button and the User Details would be fetched.
The below screenshot shows the successful result.
This screenshot shows the attributes that are received and are mapped by attribute mapping which is explained in the next step.

Step 5: Attribute Mapping

Go to Attribute Mapping Tab And fill in all the fields
Attributes are user details that are stored in your Identity Provider.
Attribute Mapping helps you to get user attributes from your IdP and map them to WordPress user attributes like firstname, lastname etc.
While auto registering the users in your WordPress site these attributes will automatically get mapped to your WordPress user details.

Step 6: Role Mapping(It is Optional to fill this)

WordPress uses a concept of Roles, designed to give the site owner the ability to control what users can and cannot do within the site.
WordPress has six pre-defined roles: Super Admin, Administrator, Editor, Author, Contributor and Subscriber.
Role mapping helps you to assign specific roles to users of a certain group in your IdP.
While auto registering, the users are assigned roles based on the group they are mapped to.