Zoho SAML Single Sign-On (SSO) with Magento as SAML IdP . Magento SAML IdP extenstion gives you the ability to use your Magento credentials to login into Zoho. Here we will go through a step-by-step guide to configure SSO between Zoho as SP (Service Provider) and Magento as IDP (Identity Provider).

Pre-requisites: Download and Installation

Installation using Composer:

• Purchase the miniOrange SAML IDP Single Sign-On extension from magento marketplace.
• Go to My profile -> My Purchases
• Please ensure you are using correct access keys (My Profile - Access Keys)
• Paste the access keys in your auth.json file inside your project
• Use the below command to add the extension to your project.

  "composer require {module_name}:{version}"

• You can see the module name and list of versions in the selector below the extension module name.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Manual Installation:

• Download the miniOrange SAML IDP Single Sign-On extension.
• Unzip all contents of the zip inside the MiniOrange/IDPSaml directory.

{Root Directory of Magento} app code MiniOrange IDPSaml

• Run the following commands on command prompt to enable the extension

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Steps to configure Zoho SAML Single Sign-on ( SSO ) Login into Magento 2

1. Configure Magento as Identity Provider

• Navigate to IDP Metadata, Copy the IDP Entity ID/Issuer, SAML Login URL and Certificate (Optional) and Keep it handy.

• In the miniOrage SAML Identity Provider extension, go to Service Provider settings tab of the extension.
• Provide the required settings (i.e. SP Entity ID/Issuer, ACS URL) find to your Service Provider Tableau Server and click on Save button to save your configuration.

2. Configure Zoho as Service Provider

Follow the following steps to Configure Zoho as SP

 Pre-requisite: Download and Installation

• Login to your Zoho account and access Zoho Mail.
• Click on Control Panel and select Mail and Docs.

• Go to Domains, click on Add Domain and add your domain.

• In the list, click the icon under the Verified column for your domain to validate it.

• Follow the steps specified on the page that opens up and after that click on Verify to validate your domain.


 Instructions:

• Open a new browser tab or window, Login into Zoho Accounts at https://accounts.zoho.com/ as a user with
  administrative rights.
• Navigate to Organization and select SAML Authentication and click on Setup Now.


Switch back to the tab / window with the IDP Metadata. Enter the information into the corresponding fields.

Sign-in URL	Copy SAML Login URL from IDP Metadata and paste it.
Algorithm	RSA
Sign out URL	Copy SAML Logout URL from IDP Metadata and paste it.
X.509 Certificate	Copy and Download Certificate (Optional) from IDP Metadata and paste it.

• Click on Configure to save the SAML Single Sign On (SSO) settings.

• Click on Download to download the metadata file. You can use this metadata file to configure the module.

3. Attribute Mapping

• In the Magento IDP extension, navigate to the Attribute Mapping tab.
• In the User Attributes section, enter the following information and click on Save .
• You can also add more attributes by clicking on + sign to add attributes.

4. SSO Testing

• Open a new browser or private incognito window and enter your Zoho URL, which will redirect you to the Magento login screen.
• Enter your Magento credentials and click the log in button.
• If you are redirected to your Zoho start page and successfully logged in, your configuration is correct.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Magento SAML Single Sign-On (SSO)
• Magento OAuth Client Single Sign-On (SSO)