The document discusses a SAML Single Sign On Magento extension that allows a Magento instance to connect with any SAML Identity Provider, enabling single sign on for customers. The extension was created by Sixto Martin and offers identity provider settings, option settings, attribute mapping, group mapping, address mapping, custom messages, and advanced settings to configure the integration. Support is provided by email with a response time of less than 48 business hours.

1. SAML Single Sign On Magento Extension - Sixto
Martin
SAML Single SignOnMagentoextensionhelpsyourcustomercanconnecta Magentoinstance withany
SAML IdentityProviderafteryouenable itsuccessfullyinyourbackend.
 If you are working with a partner that has implemented a SAML identity provider
(OneLogin, Okta, Ping Identity, ADFS, Salesforce, SharePoint...), you can use this
extension to interoperate with it, thereby enabling SSO for customers.
Please note that the module was implemented by Sixto Martin, author of 15+ SAML
plugins and several SAML toolkits. Support by mail guaranteed. Get a reply in less than
48h (business day).
Login via Identity Provider
With this Login form, your customer can connect with a Magento instance with any their
Identity Provider, they just click on the link “Login via your Identity Provider” to carry
out their login process.

2. Enable SAML Single Sign On
At first setting step, go to powerful admin panel, then you just select “Yes” to enable for
its status.
Identity Provider Settings
In this section, you can set up some info related to the IdP that will be connected with
your Magento. You can find these values at the Onelogin’s platform in the Magento App
at the Single Sign-On tab: IdP Entity Id, Single Sign On Service Url, and Single Log Out
Service Url.

3. Options Settings
In this section the behavior of the plugin is set, so you just select “ Yes” for some
improtant fields: Create user if not exists, Update user data, and Single Log Out.

4. Attribute Mapping Settings
In this section, we can set the mapping between IdP fields and Magento fields. Notice
that this mapping could be also set at Onelogin's IdP. Note that the attribute that contains
the group of the customer.

5. Group Mapping Settings
In this section, the IdP can be used its own groups. You can set the mapping between IdP
and Magento customer groups. Accept multiple valued comma separated. Example:
admin, owner, super-user. There are 5 fields, the id means that Role id=1 will match the
Magento groups that has id=1 if exists.

6. Address Mapping Settings
In this section, you can the mapping between IdP address data and Magento. If the IdP
has address data. You just fill full information in some fields: Company, Street 1, City,
Country, State/Province, Zip/Postal Code, Telephone and Fax.
Custom Messages Settings
This is one of important section to help you handle what messages are showed in the
login form.

7. Advanced Settings
In this section, you can easily handle some other parameters related to customizations and
security issues. If sign/encryption is enabled, then x509 cert and private key for the SP
must be provided.