• Home
• Reverse Proxy
• Setup SAML Authentication with a Reverse Proxy for any site

Follow the Step-by-Step Guide given below to Setup SAML Authentication for your site, using miniOrange Reverse Proxy

SAML or Security Assertion Markup Language, is an authentication protocol where the user authentication information is shared between the Identity Provider (IDP) and the Service Provider (SP). In this guide, we will see how you can enable SAML SSO Authentication with a Reverse Proxy over any web application. So let's get started!

Step 1: Sign up with Reverse Proxy with SAML Authentication

• Click here and log in with your miniOrange account and login using your credentials. If you do not have an account, you can go ahead and create one.



• Click on Authentication, on the left panel in the dashboard.



• Click on Add Authentication.



• Click on SAML from the shown tabs.

Step 2: Setup your Identity Provider

• You will see the SP metadata on the screen as in the image below. Please copy the details and configure the respective fields in your Identity provider. Copy the Signing certificate as well and save in the field X.509 Certificate of your IDP configuration.

Step 3: Setup the SAML SP in Reverse Proxy for SAML Authentication

• Now if you scroll down on the same page, you will be provided with the Identity Provider Configuration section. Please check the IDP Metadata provided by your Identity Provider and configure the details such as IDP Entity ID, SAML Login URL and SAML Logout URL.





• Select the Binding Type for SSO Request, you will get its details from the IDP metadata but if you are not sure then keep the HTTP-Redirect Binding selected for default configuration. Configure the X509 Certificate from the IDP Metadata and click on Submit to save your SAML SP application.



• You have successfully configured SAML Authentication with a Reverse Proxy.

External References

• What is Reverse Proxy?
• Secure Cloud Applications from Unmanaged Devices with Reverse Proxy
• How to set up WordPress role based access control to secure site folders?