Single Sign On Plugin
Single Sign On Plugin
.png)
If you are working with a partner that has implemented a SAML identity provider (OneLogin, Okta, Ping Identity, ADFS, Salesforce, SharePoint...), you can use this extension to interoperate with it, thereby enabling SSO for customers.
Please note that the module was implemented by Sixto Martin, author of 15+ SAML plugins and several SAML toolkits. Support by mail guaranteed. Get a reply in less than 48h (business day).
With this Login form, your customer can connect with a Magento instance with any their Identity Provider, they just click on the link “Login via your Identity Provider” to carry out their login process.
At first setting step, go to powerful admin panel, then you just select “Yes” to enable for its status.
In this section, you can set up some info related to the IdP that will be connected with your Magento. You can find these values at the Onelogin’s platform in the Magento App at the Single Sign-On tab: IdP Entity Id, Single Sign On Service Url, and Single Log Out Service Url.
In this section the behavior of the plugin is set, so you just select “ Yes” for some improtant fields: Create user if not exists, Update user data, and Single Log Out.
In this section, we can set the mapping between IdP fields and Magento fields. Notice that this mapping could be also set at Onelogin's IdP. Note that the attribute that contains the group of the customer.
In this section, the IdP can be used its own groups. You can set the mapping between IdP and Magento customer groups. Accept multiple valued comma separated. Example: admin, owner, super-user. There are 5 fields, the id means that Role id=1 will match the Magento groups that has id=1 if exists.
In this section, you can the mapping between IdP address data and Magento. If the IdP has address data. You just fill full information in some fields: Company, Street 1, City, Country, State/Province, Zip/Postal Code, Telephone and Fax.
This is one of important section to help you handle what messages are showed in the login form.
In this section, you can easily handle some other parameters related to customizations and security issues. If sign/encryption is enabled, then x509 cert and private key for the SP must be provided.
To see it best, let's check Live Demo and More Details to know more about this product.
