Joomla OAuth Single Sign-On - OIDC SSO | Login With Azure AD Extension

Azure AD Single Sign-On - OAuth OIDC SSO | Login with Azure AD (Joomla as a OAuth Client / OpenID Connect)

**Azure AD Single Sign-On - OAuth OpenID Connect SSO | Login with Azure AD plugin allows unlimited SSO / login ( Single Sign-On ) with your [Azure AD](https://plugins.miniorange.com/azure-ad-sso-single-sign-on-joomla-using-oauth-client-openid-connect),[Azure B2C](https://plugins.miniorange.com/azure-ad-b2c-sso-single-sign-on-joomla-using-oauth-client-openid-connect), and [Office 365](https://plugins.miniorange.com/office365-sso-single-sign-on-joomla-using-oauth-client-openid-connect) account credentials.

OAuth Single Sign-On - OIDC SSO | Login with Azure AD plugin supports SSO with Microsoft Azure AD, Office 365 and Azure B2C OAuth and OpenID Connect ( OIDC )providers.
It also supports limitless user authentication using the OAuth & OpenID Connect protocols, allowing authorized users to access the Joomla site.

USE CASES-

Login with Azure (Azure Active Directory Login) :
Login with Azure B2C(Azure B2C Login)
Login with Office 365 (Office 365)

#Microsoft SSO

This Joomla OAuth Single Sign-On - OIDC SSO | Login with Azure AD plugin plugin enables SSO with many Microsoft Apps, including Azure AD SSO, Azure AD B2C SSO, and Office 365 SSO, using both the OAuth and OpenID Connect protocols. It offers login redirects based on policies such as sign-up policy, sign-in policy, lost password policy, custom policy, and so on.
It supports Azure AD, Azure B2C, Office 365, SSO with the multi-tenants app (users registered in various apps from separate tenants) and SSO into multiple Joomla domains, role-based access restriction to Joomla pages, and SSO into multiple Joomla domains. Outside of the tenant / application, log in to Joomla using Microsoft accounts. Integrate Azure SSO with social account use-cases (Facebook, Google, etc.).
Apart from SSO, it also supports Joomla – Azure integrations / customizations such as token-based calls to specific API / Graph API.
Azure SSO also supports syncing Azure user profile to Joomla profile with the option to customize the profile attribute mapping ( given_name, family_name, username, email, group, custom attributes, etc) as per need.

LIST OF GRANT TYPES WE SUPPORT FOR JOOMLA OAUTH SINGLE SIGN-ON - OIDC SSO | LOGIN WITH AZURE AD

- Authorization code grant
- Implicit grant
- Resource owner credentials grant (Password Grant)
- Client credentials grant
- Refresh token grant
- Hybrid Grant
- Authorization code grant with PKCE flow ( Proof Key for Code Exchange )

[Click here](https://www.youtube.com/watch?v=RbQFTwZCkdY&t=1s) to watch premium features of plugin.

Free Version Features:-

- Auto Register Users - Automatic user registration after login if the user is not already registered with your site.
- Limited Authentication
- Attribute Mapping – Basic Attribute Mapping features to map Joomla user attributes (Username and Email only).
- Login Using the Link.
- Auto fill OAuth server configuration.

Standard Version Features:-

- All Free Version Features included.
- Unlimited Auto Register users.
- Unlimited Authentication.
- Login widget customization.
- Custom Redirect URL after login and logout - Redirect the user to a custom URLs after - successful login and logouts.
- Basic Group Mapping.

Premium Version Features:-

All the Free version and Standard Version Feature included.
- Attribute Mapping - Advance Attribute Mapping feature to map Joomla user attributes like username, first name, last name, and email. Manage username & email with data provided.
- Advance Group Mapping.
- Force Authentication / Protect complete site.
- OpenId Connect Support – Login using OpenId Connect Server.
- Domain Specific Registration
- JWT Validation.

Enterprise Version Features :-

- All the Premium Version Features Included.
- Grants Settings
- Additional End Points for getting user groups from your OAuth/OpenId Provider.
- Login Reports/Analytics.

JOOMLA OAuth Single Sign-On SUPPORTED ADD-ONS

We have a variety of add-ons that can be integrated with the OAuth & OpenId Connect Single Sign-On ( SSO ) plugin to improve the OAuth SSO functionality of your Joomla site.

- [Azure User Sync](https://plugins.miniorange.com/joomla-user-provisioning-with-azure) :- Azure User sync allows to synchronize and provision your Joomla users into Azure and vice-versa, allowing to create, read, update, delete and deactivate users between Azure and Joomla.

- [Attribute Based Redirection Customer](https://plugins.miniorange.com/page-and-article-restriction-for-joomla) :- Attribute Based Redirection Add-on can be used to redirect the user to a specific URL based on the attributes received from the OAuth server.

- [Role/Group Based Redirection](https://plugins.miniorange.com/role-based-redirection-for-joomla) :- Role/Group-Based Redirection Add-on can be used to redirect the user to a specific URL based on the roles/groups received from the OAuth server.

- [SSO Session Management](https://plugins.miniorange.com/joomla-session-management) :- SSO session management add-on manages the login session time of your users based on their Joomla roles.

- [SSO Login Audit](https://plugins.miniorange.com/joomla-login-audit-login-activity-report) :- SSO Login Audit captures and tracks all the [Single Sign-On](https://www.miniorange.com/products/single-sign-on-sso) users and generates reports

- [Two Factor Authentication](https://www.miniorange.com/products/two-factor-authentication-(2fa))

- User Role Editor

- Limit Login Attempts

- Guest User Login

- Attribute Based Redirection

REST API AUTHENTICATION

Secures unauthorized access to your Joomla sites/pages using our [Joomla REST API Authentication plugin](https://plugins.miniorange.com/joomla-rest-api-authentication) .

Firebase Authentication

The [Firebase Authentication](https://plugins.miniorange.com/firebase-authentication-for-joomla) SDK includes methods for creating and managing users who sign in with their email addresses and passwords.

Installation Steps :

Goto Extensions --> Manage --> Install.
Search for Login with Azure AD in the search box
Install the OAuth Single Sign-On - OIDC SSO | Login with Azure AD plugin.
Then go to Extensions --> Manage --> Manage.
Search for miniorange in the search box
Enable all the extensions present in the list.
Configure the plugin at Component-> miniorange OAuth client ->configure OAuth.

Dependencies

NONE

24/7 Support

If you require any Single Sign On (SSO) application or need any help with installing or configuring this plugin, please feel free to reach out to us on our 24*7 support at joomlasupport@xecurify.com or Contact us.

WEBSITE

Check out our website for other plugins from the link here or visit https://plugins.miniorange.com to see all our listed Joomla plugins. For more support or info email us at joomlasupport@xecurify.com. You can also submit your query from the plugin’s configuration page.