WordPress Single Sign On (SSO) using Salesforce as IdP

Salesforce Signal Sign On (SSO) for Wordpress miniOrange provides a ready to use solution for Wordpress. This solution ensures that you are ready to roll out secure access to your Wordpress site using Salesforce within minutes.

Step 1: Configuring Salesforce as IdP

  • Log into salesforce and go to Setup.
  • From the left pane, select IdentityIdentity Provider.
  • In the Service Provider section click on the Service Providers are now created via Connected Apps. Click here.
  • Enter Connected App Name, API Name and Contact Email.
  • Under Web App Settings, check the Enable SAML checkbox and enter the following values:
  • Entity ID SP-EntityID / Issuer from Step1 of the plugin under Configure IDP Tab.
    ACS URL ACS (AssertionConsumerService) URL from Step1 of the plugin under Configure IDP Tab.
    Subject Type Username
    Name ID Format urn:oasis:names:tc:SAML:2.0:nameid-format:persistent

Step 2: Assign Profiles

    • Now from left pane, under Administration Setup, select Manage Apps Connected Apps.
    • Click on the App you just created.
    • Under Manage Profiles, Select the profiles you want to give access to login through this app.

Step 3: Download metadata for communities

  • Under SAML Login Information, click on Download Metadata.
  • Open the downloaded file in some browser like chrome, firefox, IE.
  • Search for "ds:X509Certificate" tab and copy the entire string under this tag. String would be like this: "MII....".
  • Keep this certificate value handy for next steps.