SAML Backend Login

Self-hosted

Support

Support by: bytepark GmbH
Support languages:

Details

Order number: bytep92190595840m
Extension Partner: bytepark GmbH
Version: 1.0.1
Last update: 13 May 2024
Language support:
Self-hosted compatibility:

6.4.0.0

6.4.1.0 – 6.4.1.2

6.4.2.0 – 6.4.2.1

6.4.3.0 – 6.4.3.1

6.4.4.0 – 6.4.4.1

6.4.5.0 – 6.4.5.1

6.4.6.0 – 6.4.6.1

6.4.7.0

6.4.8.0 – 6.4.8.2

6.4.9.0

6.4.10.0 – 6.4.10.1

6.4.11.0 – 6.4.11.1

6.4.12.0

6.4.13.0

6.4.14.0

6.4.15.0 – 6.4.15.2

6.4.16.0 – 6.4.16.1

6.4.17.0 – 6.4.17.2

6.4.18.0 – 6.4.18.1

6.4.19.0

6.4.20.0 – 6.4.20.2

6.5.0.0

6.5.1.0 – 6.5.1.1

6.5.2.0 – 6.5.2.1

6.5.3.0 – 6.5.3.3

6.5.4.0 – 6.5.4.1

6.5.5.0 – 6.5.5.2

6.5.6.0 – 6.5.6.1

6.5.7.0 – 6.5.7.4

6.5.8.0 – 6.5.8.10

SAML Backend Login This plugin allows you to define up to 5 identity providers (Google,... more

Close menu

Product information

Highlights

- Up to 5 identity providers (Google, Microsoft, etc.)
- Login supplementary or as standard possible
- Security advantage: No dedicated Shopware accounts required

Description

SAML Backend Login

This plugin allows you to define up to 5 identity providers (Google, Microsoft, etc.) via which a SAML login to your Shopware administration is possible. The plugin automatically creates a new Shopware account with a predefined role if no account exists for the email address used.

You can use this plugin and the new login options (login with Google, etc) either in addition to the standard Shopware login or completely disable the standard login via the plugin configuration and only allow login via one of the identity providers.

Use Case / Example:

Your organization already uses Google Workspace. Your employees should be able to log in to your Shopware store via their Google account without having to manually create a new Shopware account for each employee and then communicate and manage this account data in turn. With this plugin it is possible to link a SAML app within your Google Workspace with your Shopware store using the plugin configuration and then your employees can log in to the store with a simple button click if they are already logged in with the corresponding Google account in the browser. Otherwise, they will be redirected to the Google login where they can authenticate themselves and then they will be redirected directly back to the store and logged in. In doing so, you can configure multiple identity providers to enable login via 2 separate Google SAML apps/workspaces, for example, or via Google and alternatively Microsoft.

Security Advantage:

You do not need to create dedicated Shopware accounts and manage additional passwords. You only enter your password on the part of the identity provider and not on the part of the store.

Read, write and discuss reviews... more

Close menu

Customer reviews

As the owner of this app you can rate it in the Shopware account

Rate now in your account

Close menu

Configuration manual

After the installation you can configure the plugin. There are the following categories:

1. Routing

"Plugin URL": You can configure the URL through which your SAML login page should be accessible. This login page contains a login button for each identity provider you have configured. Clicking on the corresponding button will start the SAML login flow.
"Admin URL": This option allows you to configure a new URL for the default login page, which is normally accessible at "/admin".
"Disable Classic Login?": Use this checkbox to disable the default login page so that login is only possible through one of the defined identity providers.
"TLS Proxy Port": If you want to use the plugin behind a reverse proxy (for example, inside a Docker container), you must configure the proxy port accordingly.

2. Identity Provider Data

You can configure up to 5 identity providers, each with individual SSO URL, entity ID and certificate. You can also define an individual "Login Button Label" and a "Login Button FA Icon Class". The latter is used to configure a CSS icon class from the free version of Font Awesome (see https://fontawesome.com/icons). The default icon clas is "fa-solid fa-lock" and displays a simple lock icon.

3. Mapping

In this section you can configure the attribute names for the user's first name, last name, and email address that should be present in the SAML response from the identity provider. Based on these values, a new Shopware account will be created for the user the first time he logs in via the identity provider.

4. Environment Configuration

The following instructions refer to the .env file of your Shopware installation:

APP_URL: It is very important for the plugin that they have the APP_URL set correctly. Otherwise there will be errors within the SAML login process, because this URL is compared to the URL where the SAML response is received from the identity provider for security reasons.

Close menu