Step by Step Guide for WordPress Single Sign On (SSO) using Google Apps as IdP

Google apps Single Sign On (SSO) for Wordpress miniOrange provides a ready to use solution for Wordpress. This solution ensures that you are ready to roll out secure access to your Wordpress site using Google Apps within minutes.

Step 1: Configuring Google Apps as IdP

  • Go to https://admin.google.com and login to your Google Apps Administrator account.
  • On the Admin Home, select More Controls Apps.
  • In the App Settings, select SAML apps.
  • Click on the "+" button at the bottom right corner to create a new SAML app.
  • Now select SETUP MY OWN CUSTOM APP from the popup.
  • On the next screen, note down the SSO URL, Entity ID URLs and download the certificate. These will be required while configuring the Plugin.
  • Once you have noted the URLs and downloaded the certificate, click on Next.
  • Enter the Application Name and Description. Click on Next.
  • Configure the following things on the next screen:
  • ACS URL ACS (Assertion Consumer Service) URL from the plugin under Identity Provider Tab.
    Entity ID SP-EntityID / Issuer from the plugin under Identity Provider Tab.
    Signed Response Checked
    Name ID Select Basic Information from the first dropdown. Then Primary Email from the second dropdown.
  • Click on Next. Then click on Finish.
  • Now go to SAML Apps again. Click on the menu link corresponding to your app (See the screenshot). Then select ON for everyone.
  • From the popup, Click on TURN ON FOR EVERYONE.

Step 2: Configuring Wordpress as SP

  • In miniOrange SAML plugin, go to Service Provider Tab. Enter the following values:
  • Identity Provider Name: GoogleApps
    SAML Login URL: The SSO URL that you noted while configuring the Wordpress site in Google Apps.
    IdP Entity ID or Issuer: The Entity ID that you noted while configuring the Wordpress site in Google Apps.
    X.509 Certificate: Open the downloaded certificate in the Notepad. Copy/paste the entire content of the file here.
    Response Signed: Checked
    Assertion Signed: Unchecked
  • In miniOrange SAML plugin, go to Attribute/RoleMapping tab. Enter the following values:
  • Username: Name of the username attribute from IdP (Keep NameID by default)
    Email: Name of the email attribute from IdP (Keep NameID by default)
    FirstName: Name of the firstname attribute from IdP
    LastName: Name of the lastname attribute from IdP
    Group/Role: Name of the Role attribute from IdP
  • You can check the Test Configuration Results to get a better idea of which values to map here.
  • Under the Role Mapping section, configure which GROUP value coming in the SAML response needs to be mapped to which role in WordPress. The Group value coming in the SAML response will be mapped to the Role assigned here and the user will be assigned that role in WordPress.
  • Go to SSO Login Settings tab. Enable auto-redirect to IDP using Redirect to IdP if user not logged in option.

  • For further details refer :
    https://wordpress.org/plugins/google-apps-login/
    https://support.google.com/a/answer/60224?hl=en


Business Trial For Free

If you don't find what you are looking for, please contact us at info@miniorange.com or call us at +1 978 658 9387.