Contents

Nextcloud WordPress Single Sign-On SSO login for WP users

Nextcloud

Nextcloud is a suite of client-server software for creating and using file hosting services. Nextcloud’s application functionally is similar to Dropbox. Unlike Dropbox, Nextcloud does not offer off-premises file storage hosting. Nextcloud is free and open-source, which means that anyone is allowed to install and operate it on their own private server devices. Login using WordPress Users (WP as SAML IDP) Plugin enables Single Sign-On (SSO) login into Nextcloud using WordPress Login credentials, i.e. authentication via WordPress. In this guide we will set up Nextcloud WordPress Single Sign-On SSO Login for WordPress users by configuring Nextcloud as Service Provider (SP) and WordPress as the Identity Provider (IDP)

Pre-requisites: Download And Installation

To integrate the WordPress site as an Identity Provider for achieving Nextcloud WordPress Single Sign-On (SSO) login, you will need to install the miniOrange Login using WordPress Users ( WP as SAML IDP ) plugin:

By miniOrange

(42)

Single Sign-On (SSO) login with WordPress Users into any Service Provider like Tableau, Zoho, Zoom, Moodle, Canvas LMS, Absorb LMS, TalentLMS, etc.

Get this plugin

Step-by-step Video to Setup SSO between Nextcloud and WordPress

Guide to configure Nextcloud WordPress SSO login:

1. Configure Nextcloud as SP (Service Provider)

Login to WordPress using Administrator account.
Download / Install this plugin - Login using WordPress Users (WP as SAML IDP) and activate it. You will see WordPress IDP in your WordPress menu bar in the dashboard.
Click on the WordPress IDP option in the menu bar, and select IDP Metadata tab.

WordPress Nextcloud SSO | Setup Nextcloud as SP

Open a new browser tab or window, Log in to your Nextcloud account as Account Admin.
Click on the top right corner. Select Apps.

Nextcloud WordPress Single Sign-On | Admin view Nextcloud as SP

Search for SSO & SAML Authentication. Click on Download and Enable.

Nextcloud WordPress Single Sign-On | Download and Enable SAML app Nextcloud as SP

Click on the top right corner, and select Settings. Find SSO & SAML Authentication on the left side, and open it.

Nextcloud WordPress Single Sign-On | SSO and SAML Authentication

Click on Use built-in SAML Authentication, click on Add Identity Provider.

Nextcloud WordPress Single Sign-On | Select built-in SAML Nextcloud as SP

Attribute to map the UID to	EMail
Identifier of the IDP Entity	Copy and paste the IDP Entity ID.
URL Target of the IdP	Copy and paste the SAML Login URL.
Certificate	Download the Certificate. Open it in notepad. Copy and paste the content here.

Nextcloud WordPress Single Sign-On | Enter IDP info Nextcloud as SP

Once this is done, click on Download metadata XML to download the SP metadata XML file.

You have successfully configured Nextcloud as Service Provider for achieving Nextcloud WordPress Single Sign-On (SSO) login using your WordPress credentials

2. Configure WordPress as IdP (Identity Provider)

Go to WordPress IDP Plugin on the Dashboard and select Service Providers tab.
Enter the following information into the corresponding fields. Click Save.

Service Provider Name	Nextcloud
SP Entity ID or Issuer	https://<your Nextcloud URL>/index.php/apps/user_saml/saml/metadata
ACS URL	https://<your Nextcloud URL>/index.php/apps/user_saml/saml/acs
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

Nextcloud WordPress SSO - Nextcloud Login | Enter SP info WordPress as IDP

Click on the IDP Metadata tab.

Nextcloud WordPress Single Sign-On | IDP metadata WordPress as IDP

3. Configure attributes in the plugin (This is a premium feature)

Select Attribute/Role Mapping. In the User Attributes section, enter the following information. Click Save.

Name	User Meta Data
EMail	user_email

Nextcloud WordPress Single Sign-On | WP Attribute Mapping WordPress as IDP

You have successfully configured WordPress as Identity Provider for Nextcloud WordPress login using Single Sign-On

You have successfully configured Nextcloud as a Service Provider, WordPress as an Identity provider, have successfully set-up attribute / role mapping and achieved WordPress Nextcloud Single Sign-On.