Joomla SAML SSO For Joomla Extension

Joomla SAML Single Sign-On (SSO) allows you to secure your Joomla site by allowing users to login into Joomla site by different SAML Identity Providers like [Azure AD]( https://plugins.miniorange.com/joomla-single-sign-sso-using-azure-ad-idp ), [Okta](https://plugins.miniorange.com/joomla-single-sign-sso-using-okta-idp), [GSuite / Google Apps](https://plugins.miniorange.com/joomla-single-sign-sso-using-google-apps-idp), [Keycloak](https://plugins.miniorange.com/joomla-single-sign-on-sso-using-jboss-keycloak-idp), [ADFS](https://plugins.miniorange.com/guide-joomla-single-sign-sso-using-adfs-idp), [Salesforce](https://plugins.miniorange.com/joomla-single-sign-sso-using-salesforce-idp), [Office 365](https://plugins.miniorange.com/saml-single-sign-on-sso-for-joomla-using-office-365-as-idp), [Shibboleth2](https://plugins.miniorange.com/saml-single-sign-on-sso-for-joomla-using-office-365-as-idp), [Shibboleth3](https://plugins.miniorange.com/saml-single-sign-on-sso-for-joomla-using-office-365-as-idp), [OneLogin](https://plugins.miniorange.com/joomla-single-sign-sso-using-onelogin-idp), [PingFederate](https://plugins.miniorange.com/pingfederate-saml-sso-single-sign-on-with-joomla), [FusionAuth](https://plugins.miniorange.com/joomla-saml-single-sign-on-sso-using-fusionauth-as-idp) or any SAML compliant Identity Provider. Joomla SAML Single-Sign-On addresses the challenge of maintaining the credentials for each application separately, streamlining the process of signing on without the need to re-enter the password.

Joomla SAML Single Sign-On (SSO) – SAML SSO Login Authentication | Login to Joomla

The miniOrange Joomla Single Sign on (SAML SSO) Plugin is a SAML 2.0 Service Provider that can be configured to establish trust between the Joomla site and a SAML 2.0 compliant Identity Provider in order to securely authenticate users to Joomla sites. This makes it feasible for your users to log in to the Joomla site in a safe and secure manner.

Key Features

- Support for Multiple SAML Providers: You have the flexibility to set up multiple Identity Providers (IDPs) such as Azure AD, Okta, and Google Apps for SAML authentication. This enables users to log in to the Joomla site using various IDPs.
- Limitless Authentication: Allows unlimited user authentication using SAML 2.0 protocol.
- Easy Integration: Integrates seamlessly with Identity Providers that adhere to standard SAML 2.0 protocol.
- Versatile Compatibility: Joomla 5, 4, 3 Supported: You can use Joomla SAML Single Sign-On Plugin seamlessly across Joomla 5, 4, and 3.
- Auto-sync IDP Configuration from metadata: Ensure Seamless SSO on your Joomla site by automatically updating and syncing SAML IDP configuration and certificates.
- Protect Complete Site: Plugin allows you to limit access to both the frontend and backend of your Joomla site exclusively to logged-in users using SSO.
- Video Overview: [Watch here](https://www.youtube.com/watch?v=6KBF2bwvmeI&list=PL2vweZ-PcNpdkpUxUzUCo66tZsEHJJDRl&index=5).

Versions & Features

Free Version

- Automatic User Registration and Login:: Automatically registers users if they are not already registered and logs them in after SSO.
- Limited User Registration & Authentication: Limited user registration and SSO authentication.
- Export Configuration: Download the plugin configuration file to transfer your plugin configurations when upgrading your license.
- Language Support: Multiple languages available.

Standard Version

- Enhanced Features: All Free Version features included.
- Unlimited User Registration & Authentication: No limitations on user registration and authentication.
- Basic Attribute Mapping: Basic attribute mapping functionality to map username, email and name.
- Basic Group Mapping: Basic group mapping functionality.
- Import Configuration:Import the plugin configuration using JSON file.
- Default Redirect URLs: You can redirect users to specific URLs after login or logout.
- Auto Redirect to IdP: Restricts the front end of your site to only logged in users using SSO.

Premium Version

- Advanced Features: All Standard Version features included.
- Advance Attribute Mapping: Map Joomla user profile attributes with IdP attributes.
- Advance Group Mapping: Enhanced group mapping capabilities.
- Single Logout: Supports the single logout functionality with all IdPs.
- Basic Backend Login using SSO: Limits access to the backend of your website to logged-in users with administrator or manager roles via SSO.

Enterprise Version

- Comprehensive Features: All Premium Version features included.
- Support for Multiple IdPs: You can configure multiple IdPs with one Joomla site for SSO.
- Comprehensive Attribute Mapping: Map Joomla user field and contact attributes with IdP attributes.
- Advance Backend Login using SSO: Limits access to the backend of your website to logged-in users with administrator or manager child roles via SSO.
- Custom X509 certificate: You can add or generate custom X509 certificate pairs specifically tailored to your Joomla site.
- Auto-Sync IdP Configuration from metadata: Maintain the configuration to prevent any disruptions in SSO.
- Store Multiple IdP certificates: Prevent SSO breakdowns by storing multiple certificates.
- Domain mapping and restriction: This feature becomes beneficial when you have set up multiple IdPs.

For more detailed feature comparisons visit [here](https://plugins.miniorange.com/joomla-single-sign-on-sso#pricing). You can refer to these [setup guides]( https://plugins.miniorange.com/step-by-step-guide-for-joomla-single-sign-on-sso ) and [videos](https://www.youtube.com/playlist?list=PL2vweZ-PcNpdkpUxUzUCo66tZsEHJJDRl) for the plugin configuration with your IdP.

Use Cases

- Azure SSO: Enables SSO with Azure AD, Azure AD B2C, and Office 365, offering storing multiple certificate storage options.
- Google Apps SSO: Allows login with Google Apps/ GSuite, synchronizes user profiles and roles.
- AWS Cognito SSO: Facilitates SSO with AWS Cognito, Amazon, and linked social login accounts, with user profile synchronization and role mapping.
- Keycloak SSO: Supports SSO with Keycloak, including role-based access control to external services.
- Okta SSO: Auto login and auto creation of users with attribute and group mapping.
- ADFS SSO: Users can login to Joomla site by using your ADFS user’s credentials and support windows authentication.

SUPPORTED ADD-ONS

We have various add-ons to extend the functionality of SAML SSO plugin which can be easily integrated with your Joomla site.

- Page and Article Restriction: Page and Article Restriction allows you to prevent unauthorized users from accessing certain pages or articles, as well as redirecting users to a specific page after SSO.
- Integrate with Community Builder: It enables you to link the Community Builder profiles together. So that you can easily map the community builder's attributes with the IDPs attributes.
- SSO Login Audit : This addon captures all actions of SSO users and will generate the reports.
- Role Based Redirection: This add-on allows you to redirect your users to specific pages/articles based on the roles/groups of the users in Joomla site.
- Media Restriction: This add-on allows you to prevent users who are not logged in from accessing certain files or folders.
- User Provisioning with SCIM: With this plugin, whenever an Identity Provider makes changes like creating, updating, or deleting a user, those changes will be mirrored on your Joomla site in real-time. However, for this synchronization to work, your IDP must support the SCIM standard for User Provisioning.

Installation Steps

1. Go to Extensions --> Manage --> Install.
2. Search for "miniOrange SAML SP" and install the plugin.
3. Configure the plugin settings at Component -> miniOrange SAML SP -> Service Provider Setup.

Support & Website

- Dependencies: None
- 24/7 Support: Contact us at [joomlasupport@xecurify.com](mailto:joomlasupport@xecurify.com) for assistance.
- Website: Visit [our website](https://plugins.miniorange.com/joomla) for more Joomla plugins and support.