Single Sign On (SSO)

SSO — Single Sign-On for Magento 2 (Adobe Commerce SSO) by miniOrange gives your store one secure, unified login — letting customers and admins sign in with the credentials they already use, through whichever protocol your identity provider speaks. The extension supports OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT, so a single solution covers virtually every modern authentication scenario. Connect to Microsoft Entra ID (Azure AD & Azure B2C), Okta, Keycloak, Salesforce, Auth0, AWS Cognito, PingFederate, OneLogin, Office 365, Google Workspace, Discord, LinkedIn, Slack, Amazon, Twitch, and any other custom OAuth, OIDC, or SAML Identity Provider.

SSO for Adobe Commerce — Overview

Our SSO Extension for Adobe Commerce (Magento 2) is built to remove login friction without compromising security. Because it speaks multiple protocols, it works with practically any enterprise or cloud identity provider — so your users log in once with existing credentials instead of juggling yet another username and password. Advanced capabilities like attribute mapping, role and group mapping, and automated user provisioning give you fine-grained control over who gets access and what they can do, while keeping the experience effortless for the end user.

The extension is compatible with the latest Magento 2.4.9 and PHP 8.5, and is purpose-built for modern storefronts — including Hyvä themes, GraphQL, and Headless / PWA setups — across Adobe Commerce Cloud, Adobe Commerce On-Prem, and Magento Open Source.

Why store owners choose our Magento SSO extension by miniOrange - 

• One login, every protocol — OAuth, OIDC, SAML, and JWT in a single extension, so you're never locked into one standard or forced to buy multiple plugins.
• No more password fatigue — users sign in with their existing corporate or IdP credentials; nothing new to create, remember, or reset.
• Security you control — centralize authentication through your trusted IdP and enforce it consistently across storefront, admin, and every store view.

Demo & Docs

Sandbox Demo & Trial Extension

Setup Docs | Setup Video | Support Portal

What is Single Sign-On (SSO)?

Single Sign-On (SSO) is an authentication method that lets users securely access multiple applications and websites with a single set of credentials. Instead of maintaining separate logins for every app, users authenticate once through a trusted identity provider — such as Microsoft Entra ID (Azure AD), Okta, Keycloak, Salesforce, Auth0 etc. and gain seamless access everywhere. Our Magento SSO extension brings that same convenience and security to your storefront and admin panel, with no user data ever stored or processed by the extension, everything stays on your premises.

Features

Free Version

• Single Sign-On (SSO): Authenticate using SAML 2.0, OAuth 2.0, OpenID Connect, and other standard protocols.
• Auto-Create Users (up to 10): New users are created in Magento automatically after authentication.
• SSO Login Button: Add a one-click login button to your Magento customer login page.
• Basic Attribute Mapping: Map essential attributes like First Name and Email from your IdP into Magento.
• Single Identity Provider Support: Integrate one identity provider using OAuth, OIDC, or SAML.

Premium Version (includes all Free features, plus:)

• Unlimited Auto-Created Users: No cap on users provisioned via SSO.
• Admin (Backend) & Customer (Frontend) SSO: Secure both storefront and Magento admin logins.
• Site-Wide Protection & Auto-Redirect: Redirect anonymous users to your IdP for authentication before they can access the store.
• Advanced Attribute Mapping: Map detailed attributes (Username, Email, First Name, Last Name, Role, and custom fields) to Magento.
• Advanced Role & Group Mapping: Assign Magento admin roles and customer groups automatically based on the roles/groups sent by your IdP.
• Custom Redirects: Define custom URLs for redirection after login and logout.
• Multi-Store & Multi-Site Support: Authenticate different user groups across multiple stores or sites within your Magento installation.
• Multiple Identity Provider Support: Configure several IdPs simultaneously for different user groups.
• Customization: Need a feature you don't see? We build custom capabilities into the extension based on your requirements.

Supported Authentication Protocols

One extension, every major standard — ensuring compatibility with virtually any enterprise or cloud identity provider:

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• JWT-based Authentication
• LDAP & Custom Authentication Mechanisms

Supported Identity Providers

• Microsoft Entra ID (Azure AD, Azure B2C)
• AWS Cognito
• Okta
• Google Workspace
• Salesforce
• Keycloak
• Auth0
• Office 365
• OneLogin
• PingFederate
• ADFS
• WHMCS
• Discord, Facebook, Twitter/X, LinkedIn, Slack, GitLab, and more

If your identity provider isn't listed, contact us at magentosupport@xecurify.com for custom integration — we support practically any OAuth, OIDC, or SAML-compliant provider.

Real-World Use Cases

Our extension powers production-grade authentication for complex, enterprise Magento environments — not just basic logins:

• B2B SSO for Magento Multi-Site: Centralize authentication across multiple Magento websites, stores, and regions through a corporate IdP, with company-level attribute mapping and support for both IdP- and SP-initiated flows.
• Auth0 SSO for Multisite Headless Adobe Commerce: Secure, token-based SSO across headless storefronts, with Auth0 as the central IdP and Adobe Commerce as the protected authentication gateway.
• Secure Magento Mobile Authentication: Mobile app login via Azure AD B2C using secure JWT tokens mapped to Magento customer accounts.

Automate User Lifecycle Management

Want real-time user creation, updates, and deletions synced between your identity provider and Magento? Pair this extension with our Magento User Provisioning & Sync extension for automated, bidirectional user management — in both directions, in real time.

Explore Our Other Magento Extensions

Magento SAML SP SSO · Magento OAuth Server SSO · Magento SAML IdP SSO · Two-Factor Authentication (2FA) · OTP Verification · Headless Magento SSO · LDAP/AD Login · User Provisioning & Sync Secure MCP Server for Magento  Security Suite— and more here.

Account & Pricing

You do not need to create an account or register with miniOrange to use the free version.

To use premium features, upgrade to one of our premium plans. You can view pricing for the premium versions here.

Dependencies

NONE

24/7 Support

Need help choosing or configuring an SSO solution? Our team is available around the clock at magentosupport@xecurify.com or via our contact page.

About miniOrange

miniOrange is a trusted identity and access management provider protecting logins for enterprises worldwide, including HP, Johnson & Johnson, Nokia, Seagate, and LG. Explore our full Magento suite or discover our broader product range — Single Sign-On (SSO), Two-Factor Authentication (2FA), Multi-Factor Authentication (MFA), and User Provisioning.

For more information, email magentosupport@xecurify.com, or submit a query directly from the extension's configuration page.