The miniOrange nopCommerce SAML Single Sign-On (SSO) plugin converts your nopCommerce site into a SAML-compliant Service Provider, thereby generating the necessary details that are required for the metadata.
To configure the plugin you need to follow the steps given below:
Upload SP Metadata in IdP - First, you have to create an SSO application at your Identity Provider side using the metadata generated by the plugin from your nopCommerce site. This in turn will generate the metadata of your Identity Provider, generally in the form of a URL or a downloadable XML file.
Upload IdP Metadata in the plugin - To configure miniOrange nopCommerce plugin, upload the metadata provided by your identity provider by clicking the upload metadata button in the Identity Provider Section of the Plugin. Once these 2 steps are over, the connection between your IdP and nopCommerce site (SP) will be completed.
Test Configuration - Once you have successfully configured the Identity Provider click on the Test Configuration button to check if your SSO is working correctly.
Attribute Mapping - Attributes are user details stored in your Identity Provider. Every time when your user SSO into the nopCommerce Site these attributes will be automatically mapped to your nopCommerce user profile.
Role Mapping (Optional) - Role Mapping is used to assign roles to users based on their SAML attributes. Through this, the particular role will be applied to users once they meet the specified conditions when logging into the nopCommerce site via SSO.
Redirection and SSO Link - This tab helps you to configure a “redirect url after login” i.e where the user will be redirected after login into your nopCommerce site. Also here you can find the SSO link of your nopCommerce site or store.
Once the configuration is complete, when you initiate SSO login from your nopCommerce site, you will be redirected to your Identity provider login. After entering the IDP credentials the user will be logged into the nopCommerce site (SP) successfully establishing a secure Single Sign On Login.