• Home
• Login with External IDP
• Kakao SSO

Single Sign-On (SSO) for Apps Using Kakao as IDP

---

Configure Kakao as the OAuth Identity Provider to enable Single Sign-On (SSO) across various applications. Here, users can login to all applications (SPs) using their Kakao login credentials by configuring Kakao as an Identity Provider (IdP). miniOrange will act as an Identity Broker which forms a trusted connection between identity providers and multiple service providers by enabling cross-protocol authentication.

Implementing Kakao SSO allows users to log into your websites and applications with a single set of credentials using the Kakao OAuth IDP. This solution ensures that you are ready to roll out secure access to your application using Kakao within minutes.

Follow the Step-by-Step Guide to configure Kakao Single Sign-On (SSO)

1. Configure miniOrange as Service Provider (SP) in Kakao

• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Providers >> click Add Identity Provider.



• Select OAuth 2.0 and copy the OAuth Callback URL which we will use to configure Kakao as OAuth Server/Provider.



• Now go to Kakao Developers, sign up or log in to your account, and configure Kakao.
• Click on Add an App button.



• Enter App Icon, App name, Company name, select the Category. Then check the checkbox and click on Save button.



• Click on the recently created application.



• Make your app a Biz App by clicking on Business in Left menu.



• Navigate to dashboard and click on the Go to Settings button in the Settings section of Kakao Login.



• Change the state of Kakao Login Activation to On.



• Next, change the state of OpenID Connect Activation to On



• Click Register Redirect URI button and add the Callback URL copied from the miniOrange dashboard. Click on Save.





• Then, click on the dashboard and click on the Go to Settings button in the Settings section of Consent Items. Then set the Email and Name scopes. You can set other scopes according to your requirement.



• Select Required Consent Option for scopes.



• Under the Platform, click Register Web Platform, enter the host name of miniOrange dashboard, and click Save.



• Go to Business authentication, select Security , and click Generate to create a client secret code. Copy Client secret and paste it into the miniOrange OAuth Identity provider.



• Click on API Keys from the left menu. Copy the REST API Key and Paste it into the Client ID in the miniOrange OAuth Identity provider.

2. Configure Kakao as OAuth 2.0 Provider in miniOrange

• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Providers >> Add Identity Provider.
• Select OAuth 2.0 and and select the Custom Provider in the dropdown of IDP Name.





• Kakao Application Endpoints and Scope:

  OAuth Authorize Endpoint	https://kauth.kakao.com/oauth/authorize
  OAuth Access Token Endpoint	https://kauth.kakao.com/oauth/token
  OAuth Get User Info Endpoint (optional)	https://kapi.kakao.com/v2/user/me
  Client ID	Click here
  Client secret	Copied from above step
  Scope	account_email name (Make sure it same as you set the scopes in consent)

• Click on Save.

3. Test Connection

• Visit your Login Page URL.
• Go to Identity Providers tab.
• Click on Select >> Test Connection option against the Identity Provider (IDP) you configured.



• On entering valid Kakao credentials (credentials of user assigned to app created in Kakao), you will see a pop-up window which is shown in the below screen.



• Hence your configuration of Kakao as IDP in miniOrange is successfully completed.

Configure Attribute Mapping

• Go to Identity Providers >> View Identity Providers >> Your configured Kakao as IdP.
• Now click on Select and then Configure Attribute Mapping of your application.

• Attribute Type - USER
• Attribute Type - EXTERNAL

Maps information, such as email and username, during Just-In-Time (JIT) user creation. Email and Username attributes are necessary to create the user profile.

• Click on the + Add Attribute button to add the attribute fields.



• Check the attributes in the Test Connection window from the previous step. Choose any attribute names you want to send to your application under Attribute Name sent to SP.
• Enter the values of the attributes coming from IdP into the Attribute Name from IdP field on the Xecurify side.

EXTERNAL mappings help alter incoming attribute names before sending them to apps, ensuring that the data is in the correct format.

• Click on the + Add Attribute button to add the attribute fields.



• Check attributes in test connection window from last step. Enter the attribute names (any name) that you want to send to your application under Attribute Name sent to SP.
• Enter the value of attributes that are coming from IdP into the Attribute Name from IdP field on the Xecurify side.

External References

• What is Identity Brokering Services? Know more about it
• What is Identity and Access Management (IAM) ?
• Learn more about how miniOrange functions as an Identity Broker
• SP-Initiated v/s IdP-Initiated SSO
• Know more about SAML Identity Provider?