SAML Single Sign-On (SSO) in Zoho | Magento – Zoho SSO Login

Overview

Login into Zoho using Magento user credentials. This guide will help you integrate Magento as a SAML 2.0 Identity Provider (IdP) and Zoho as a Service Provider (SP) using the miniOrange Magento SAML IDP (Identity Provider) Extension. Magento SAML IDP extenstion gives you the ability to use your Magento credentials to login into Zoho (SP). Here we will go through a step-by-step guide to configure SSO between Zoho as SP (Service Provider) and Magento as IDP (Identity Provider).

Installation Steps

• Using Composer
• Manual Installation

• Purchase the miniOrange SAML IDP Single Sign-On extension from magento marketplace.
• Go to My profile -> My Purchases
• Please ensure you are using correct access keys (My Profile - Access Keys)
• Paste the access keys in your auth.json file inside your project
• Use the below command to add the extension to your project.

  "composer require {module_name}:{version}"

• You can see the module name and list of versions in the selector below the extension module name.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:upgrade

• Download the miniOrange SAML IDP Single Sign-On extension.
• Unzip all contents of the zip inside the MiniOrange/IDPSaml directory.

{Root Directory of Magento} app code MiniOrange IDPSaml

• Run the following commands on command prompt to enable the extension

php bin/magento setup:upgrade

Prerequisites

Validate your Zoho domain (skip this step if you already have a verified Zoho domain)

• Login to your Zoho account and access Zoho Mail.
• Click on Control Panel and select Mail and Docs.

• Go to Domains, click on Add Domain and add your domain.

• In the list, click the icon under the Verified column for your domain to validate it.

• Follow the steps specified on the page that opens up and after that click on Verify to validate your domain.

Instructions:

• Open a new browser tab or window, Login to Zoho Accounts at https://accounts.zoho.com/ as a user with administrative rights.
• Navigate to Organization.
• Select SAML Authentication and click on Setup Now.

Switch back to the tab / window with the IDP Metadata. Enter the information into the corresponding fields.

Sign-in URL	Copy and paste the SAML Login URL.
Sign out URL	Copy and paste the SAML Logout URL.
Algorithm	RSA
X.509 Certificate	Download the certificate. Upload it here.

• Click on Configure to save the SAML Single Sign On (SSO) settings.
• Under the Identity Provider Settings enter the values as suggested below.

• Click on Download to download the metadata file. You can use this metadata file to configure the plugin.

Steps to configure Zoho SAML Single Sign-on (SSO) Login into Magento 2

Configuring Magento as SAML Identity Provider (IdP):

• In the miniOrange IDP (Identity Provider) extension, go to Applications tab.

• Search for Zoho in the choose application searchbox and select the application.

• Enter the Application name under SP Name.

• Now, enter the SP Entity ID or Issuer and ACS URL copied earlier and save the details.

Configure Zoho as Service Provider:

• Navigate to the Applications tab and click on Metadata settings for the Zoho application

• Here, you can find the Identity Provider Metadata URL /XML Metadata or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate. You can also download the IdP Metadata XML file which will be used for Zoho configuration.

• You will now have 3 options to provide the IDP Metadata to Zoho by downloading the XML Metadata, Metadata URL or providing the detials manually.
• Option 1 - Download the XML Metadata.
• Download the XML Metadata by clicking it on Download XML Metadata button.

• Navigate to your Zoho and upload the XML metadata file downloaded and click on the Fetch Metadata button.
• Option 2 - Metadata URL.
• You can also copy the Metadata URL and provide it to your service provider to fetch the metadata.

• Option 3 - Provide the details manually to the Zoho.
• Copy the metadata details according to the table below.



IDP-EntityID / Issuer	IDP-EntityID / Issuer
Single Sign On URL	SAML Login URL / Passive Login URL
SAML X509 Certificate	Certificate

• Navigate to your Zoho and paste the metadata details.

Attribute Mapping *(This is a Premium Feature)

• In the miniOrange Magento IDP extension, navigate to the Applications tab and click on Edit settings for the Zoho application.

• Click on Add Attribute button.

• Add the attribute name you want to send to your service provider and select the attribute from the dropdown menu and click on Save Button to save changes.


You have successfully configured the SAML SSO between Zoho as SAML SP and Magento as SAML IDP.




Related Articles



• What is SSO?
• What is SAML IDP SSO?
• Magento SAML SSO
• Magento as SAML IDP