Set up SSO with Salesforce

This document will help you in configuring SAML Single Sign-On (SSO) between Salesforce and your Drupal site. By following this guide, you can enable users to log in to your Drupal site using their Salesforce credentials, making it an Identity Provider.

The Drupal SAML SSO - Service Provider module is compatible with Drupal 7, Drupal 8, Drupal 9, Drupal 10, and Drupal 11.

 Download  Know more

Prerequisite:

• Install and activate the SAML SSO - Service Provider module on your Drupal site. Follow these steps to install the module.

Setup Video: 

Drupal SAML SP Metadata:

• After installing the module on your Drupal site, go to the Administration menu and navigate to Configuration → People → miniOrange SAML SP (/admin/config/people/miniorange_saml/idp_setup). 

• Copy the SP Entity ID/Issuer and SP ACS URL from the Service Provider Metadata tab and keep them handy. These details are required to configure Salesforce as an IdP.

  

Configure SAML Single Sign-On Application in Salesforce:

• Login into your Salesforce account.

• In the top right corner, click on the setting Icon. Expand it and click on Setup.

  

• Navigate to the Quick Find box from the left side.

• Enter Identity Provider, then select Identity Provider.

  

• Click on Enable Identity Provider button.

  

• Then, click on Save button to proceed.

  

• Click the Download Metadata button and keep the downloaded file handy. This file will be required to configure Drupal as a SAML Service Provider (SP).

• Now, click on the Service Providers are now created via Connected Apps. Click here link. You will be redirected to the New Connected App configuration page.

  

• On the New Connected App, provide the following information.

  • In Basic Information:
    • Enter the name of the application in Connected App Name text field.
    • After you enter the Connected App Name the API Name will be automatically generated.

    • Enter your current email address in the Contact Email text field.

      

  • Under the Web App Settings section, check the Enable SAML checkbox and enter the required information in the corresponding fields from the Service Provider Metadata tab of the module.

    Salesforce Field	Service Provider Information (Drupal)
    Entity ID	SP Entity ID / Issuer
    ACS URL	SP ACS URL
    Subject Type	Username
    Name ID Format	urn:oasis:names:tc:SAML:2.0:nameid-format:persistent

    

• Scroll down and click on the Save button to save your configuration.

Assign a profile to your Salesforce Application:

• Navigate to the Quick Find box from the left navigation panel.
• Search for Manage Connected Apps, then select Manage Connected Apps.

• Select the application that you have created on Salesforce. For example, Drupal.

  

• Scroll down to Profiles and click on the Manage Profiles button.

  

• Select the profiles you want to give access to login through this app. Click on the Save button.

  

The profile has been successfully assigned to your application.

Configure Drupal as SAML Service Provider:

• Go to your Drupal site. Navigate to the Service Provider Setup tab of the module and click on the Upload IdP Metadata.

• In the Upload Metadata File field, select the XML metadata file you downloaded from Salesforce, and then click the Upload File button.

  

  If you need to update your Identity Provider Name, follow these steps:

  • Under Action, select the Edit link.
  • Enter Salesforce as the name of the Application in the Identity Provider Name text field.
  • After you have updated your Identity Provider Name, scroll to the bottom and click on the Save Configuration button.

• After successfully saving the configurations, click on the Test link to test the connection between Drupal and Salesforce.

  

• On the Test Configuration pop-up, if you don’t have an active session in the same browser, you will be prompted to sign in to Salesforce. After successfully logging in, a list of attributes received from Salesforce will be displayed.

• Scroll down and click on the Done button.

  

Congratulations! You have successfully configured Salesforce as the identity provider and Drupal as the Service Provider.

If you face any issues in test configuration, you can reach out to us at drupalsupport@xecurify.com with a screenshot of the test configuration window.

How does SAML SSO login work?

• Open a new browser/private window and navigate to the Drupal site login page.
• For SP-initiated SSO on your Drupal, click on the Login using Identity Provider (Salesforce) link.

• You will be redirected to the Salesforce login page, where users can enter their Salesforce credentials. Once successfully logged in, Salesforce users will be able to access your Drupal site within seconds.

 Back to top