Kentico SAML single sign-on (SSO)

Steps to Configure the Kentico SAML 2.0 Single Sign-On (SSO) Module

Step 1: Download and extract the package

• Download miniOrange Kentico SAML 2.0 Module.
• For Setting up the connector, extract the kentico-saml-sso-module.zip, you will find a DLL file miniorange-saml-sso.dll, a configuration file saml.config, and an integration.md file which contains the steps for adding the module into your application.

Step 2: Add the module in your application

• Add miniorange-saml-sso.dll in the bin folder (where your other DLL files exist) for your kentico site.
• Register miniorangesamlsso module for your kentico site according to the provided steps in the integration.md file.
• Add the provided configuration file saml.config in the root directory for your kentico site.
• After integration open browser and browse the connector dashboard with URL below:
https://<kentico-site-base-url>/?ssoaction=config
• IIt will pop up the registration page or login page. You have successfully added the miniOrange saml sso module on your kentico site.

Step 3: Configure your Identity Provider

There are below two ways with which you can get the SAML SP metadata to configure on your identity provider end.

A] Using SAML metadata URL or metadata file:

• Under the Service Provider Settings section, you can find the metadata URL as well as the option to download the SAML metadata.
• Copy metadata URL or download metadata file to configure the same on your identity provider end.
• You can refer to the below screenshot:




B] Uploading metadata manually:

• From the Service Provider Settings section, you can copy the service provider metadata manually like SP Entity ID, ACS Url, Single Logout Url, and provide it to your identity provider for configuration.
• You can refer to the below screenshot:

Step 4: Configure your Service Provider

There are below two ways with which you can configure your SAML identity provider metadata in the module.

A] Upload metadata using the Upload IDP Metadata button:

• If your identity provider has provided you with the metadata URL or metadata file (.xml format only) then you simply configure the identity provider metadata in the module using the Upload IdP Metadata option.
• You can refer to the below screenshot.



• You can choose any one of the options according to the metadata format you are available with.

B] Configure the identity provider metadata manually:

• After configuring your Identity Provider, it will provide you with IDP Entity ID, IDP Single Sign On URL and x.509 Certificate. Configure these values under IDP Entity ID, Single Sign-On Url and SAML X509 Certificate fields respectively.
• Click Save to Save your IDP details.

Step 5: Test Configuration

• Click on the Test Configuration button to test whether the SAML configuration you’ve done is correct or not.
• The below screenshot shows a successful result.

Step 6: Attribute Mapping

• Map your Kentico user profile attributes with the Identity Provider (IdP) attributes.

Step 7: Use the following link in your Kentico site to initiate Single Sign-On (SSO)

• Use the following URL as a link in your application from where you want to perform SSO:
  http://<kentico-base-url>/?ssoaction=login
• For example you can use it as:
  <a href="http://<kentico-base-url>/?ssoaction=login”>Log in</a>"

Step 8: Use the following link to your Kentico site to initiate Single Logout

• Use the following URL as a link in your application from where you want to perform SLO:
  http://base-url/?ssoaction=logout
• For example you can use it as:
  <a href="http://base-url/?ssoaction=logout”>Log out</a>"




You can configure the kentico SAML 2.0 Single Sign-On (SSO) module with any Identity Provider such as ADFS, Azure AD, Bitium, Centrify, G Suite, JBoss Keycloak, Okta, OneLogin, Salesforce, AWS Cognito, OpenAM, Oracle, PingFederate, PingOne, RSA SecureID, Shibboleth-2, Shibboleth-3, SimpleSAML, WSO2 or even with your own custom identity provider.

Not able to find your IdP? Contact us at info@xecurify.com and we'll help you set up SSO with your IdP in no time.





We do provide SSO solutions for the following:

SAML SSO into Custom ASP.NET apps	Click here to know more
SAML SSO into DotNetNuke (DNN) site	Click here to know more
OAuth SSO into DotNetNuke (DNN) site	Click here to know more
SAML SSO into Sitefinity site	Click here to know more
SAML SSO into Umbraco site	Click here to know more

miniOrange Identity Management Features

• Single Sign-On

  miniOrange Single Sign-On (SSO) Solution provides easy and seamless access to all enterprise resources with one set of credentials. miniOrange also provides secure authentication by establishing a trust relationship between the Service Provider and Identity Provider. miniOrange Single Sign-On supports SSO to any type of device or application whether they are in the cloud or on-premise. Learn More

• Multi-factor Authentication

  Secure your application from password theft using multi-factor authentication methods with 15+ authentication types provided by miniOrange. Our multi-factor authentication methods prevent unauthorized users from accessing information and resources having passwords alone as an authentication factor. Enabling second-factor authentication for protects you against password thefts. Learn More

• IP Blocking

  miniOrange provides IP blocking/IP restriction for login which adds security to Gmail, Web, and other applications. In this, we provide you option for IP blocking which includes both automatic (based on user behavior) and manual IP blocking which includes blacklisting and whitelisting of IP addresses to provide access restriction, the office only access, intranet access & network restriction. Learn More

• Adaptive Authentication

  miniOrange Adaptive Authentication aims to provide a better experience to reduce the authentication burden on users while enforcing strong authentication where it is needed the most. For example, when a user attempts to access an application via an unregistered device then they may be prompted to register it. If the user logs in from a geographical location other than their office, they may be asked to answer security questions. Learn More

• User Provisioning

  miniOrange User Provisioning provides an easy way of creation, management, and maintenance of end-users especially for large enterprises to reduce the risk for unauthorized access of information. User provisioning includes the creation, updating and deletion of user accounts. User provisioning makes life easier for admins because they do not have to manually arrange access for each user. Learn More