What is SSO
Single Sign-On (SSO) is an authentication process during which a user is provided access to multiple applications and/or websites by employing a single set of login credentials (such as username and password).
This prevents the necessity for the user to log in and out separately into the various applications. Single Sign-On (SSO) addresses the challenge of maintaining the credentials for every application separately, streamlining the method of signing-on without the need to re-enter the password. SSO is a crucial aspect of the many Identity and Access management (IAM) and security control solutions.
When a user signs into a service with their SSO login, an authentication token is created and stored either in their browser or in the SSO solution’s servers. Any app or website the user subsequently accesses will check with the SSO service, which then sends the user’s token to confirm their identity and provide them with access.
Architecture
Image by : Diego Pozag
SSO Workflow
Image by : Manish Harsh
Workflow of SSO in Drupal
Drupal as IDP and SP
1) Drupal as a SAML SP : Allow your users to login into your Drupal site using their IDP ( Identity Provider ) Credentials.
2) Drupal as a SAML IDP: Allow your users to login to any SAML complaint application using their Drupal site credentials.
Guide for Drupal Single Sign On (SSO) using Drupal 9 as Identity Provider (IDP) and Service Provider (SP)
Drupal IDP Modules used for SSO
Requirements before initiating SSO in Drupal
Configure SSO module in Drupal as IDP
Notes:
Configure miniOrange SP module Settings in Drupal
allowedOrigins: ['https://my.idpsite.com']
Testing Tools
We will use the following tool to debug our SAML request as parameters are properly being transmitted from IDP to SP or vice-versa.