Domo Single Sign-On Login using WordPress as IDP

Overview

Our Login using WordPress Users (WP as SAML IDP) plugin enables you to configure WP as IDP (Identity Provider) and Domo as SP (Service Provider). Here we will go through a step-by-step guide to setup Domo SSO with WordPress.

Pre-requisites : Download And Installation

To integrate the WordPress site as an Identity Provider, you will need to install the miniOrange Login using WordPress Users ( WP as SAML IDP ) Plugin:

Configuration Steps

Step 1. Configure Domo as Service Provider

• Open your WordPress site, install and activate the Login using WordPress Users ( WP as SAML IDP ) plugin on your WordPress site which is acting as Identity Provider.
• Now go to the WordPress IDP plugin, navigate to the IDP Metadata tab. Here, you can find the Identity Provider Metadata URL or you can Download the Metadata File.
• You will find IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate. You would need these to configure the Service Provider(Domo).

• Login into Domo as an administrator, and then navigate to the Authentication tab.
• Under this tab, go to the SAML (SSO) option.

• A webpage will be displayed asking whether to start the setup or not, click the Start Setup button, and then select Metadata upload option.

• Click on the Manual Setup tab. Under the Information from your IdP section, paste the metadata URL from the WP IDP Plugin and upload it.

• Else, you can enter the IDP details manually by clicking on the Manual entry option under the Information from your IdP section.

• Enter the values by referring to the table below.

Entity ID	Enter the IDP Entity value from the IDP Metadata tab of WordPress IDP Plugin.
Identity Provider endpoint URL	Enter the SAML Login URL value from the IDP Metadata tab of WordPress IDP Plugin.
X.509 certificate	Download the Certificate from the from the IDP Metadata tab of WordPress IDP Plugin and upload it here.

• Under the Advanced settings section enable the checkbox for Use SAML Relay State to redirect.

• Click on the SAVE CONFIG button to save the configurations done.
• Before clicking on the Enable SSO, it is suggested to add Admin/selected users in the Direct Sign on List. Navigate to the Direct Sign on List and add the users who can directly sign in to Domo using their Domo credentials as well as via SSO.

Step 2. Configure WordPress (WP) as IdP (Identity Provider)

• In the WordPress IDP plugin, navigate to the Service Provider tab and enter the values corresponding to the information from Domo under the Authentication > SAML SSO > Manual Setup tab of your Domo Admin Portal.

Service Provider Name	Name of your Service Provider.
SP Entity ID or Issuer	Domo portal’s domain
ACS URL	SAML Assertion Endpoint URL
Assertion Signed	Checked
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
X.509 Certificate (optional):(For Signed Request)	Download the x.509 certificate from the Domo portal and copy paste it's content in this field.

• Click on the Save button to save your configuration.

Step 3. Attribute Mapping (This is a premium feature)

In WordPress:

• In the WordPress IDP plugin,navigate to the Attribute/Role Mapping tab.
• In the User Attributes section, enter the following information and click Save.
• Click on + sign to add attributes.

Name	User Meta Data
Name	nickname
Email	user_email

Related Articles

• What is Single Sign-On (SSO)?
• What is SAML?
• Frequently Asked Questions (FAQs)