If you've chosen to use the MiniOrange as SP plugin (which we recommend), here are the steps you'll need to take to configure the plugin.
Step 1:
Purchase the MiniOrange Premium plugin and install it in your site. Once installed, and activated, you should see this icon:
You'll also need to procure the MiniOrange License Key from the same dashboard where you downloaded the plugin:
Step 2:
Once activated, navigate to the plugin and login, using the credentials you created during the initial purchase and setup process. Once logged in, you'll also need to provide the license code from Step 1.
Step 3:
In the Service Provider Metadata tab, retrieve and provide the metadata for your site to Cobalt Staff, either in the form of the URL or the XML file. Cobalt will use this data to configure the Service Configuration for SAML.
Step 4:
In the Service Provider Setup tab, click the Upload IDP Metadata button to input the metadata URL provided to you by Cobalt staff. If uploading the metadata URL does not seem to work, confirm that the metadata URL correctly directs you to an XML file in another browser tab. If it does work, please refer to the support team.
When done, the metadata should auto-fill the below boxes. Be sure to Enable the Sign SSO and SLO Requests button. Save these configurations using the Save button at the bottom of the page.
Step 5:
In the Attribute/Role Mapping tab, make sure that the Attribute Mapping matches the image below:
In the Role Mapping section of the same tab, set the Active Contacts role as the Subscriber (or whatever your base level role is).
Step 6:
In the Redirection & SSO, under the Option 2 block, enable the Redirect to IDP button. This will auto-enable the Enable backdoor login button. Copy down the backdoor URL somewhere safe. If you need to access the back-end, this URL will allow you to reach the website login rather than the SSO login, where you can use your CMS credentials to enter the back-end.
On the same tab, in the Option 3 block, enable toe Use Button as ShortCode and the Use Button as Widget. This will allow you flexibility in how you create the login button. In addition, you may format the shape, theme and size of the login button in this block.
Finally, in the Option 4 block, you can define the text of the login/logout buttons and copy the ShortCode to the login button (if you are using ShortCode) or navigate to the Widgets page to use the Login widget. Regardless of which option you choose, you must choose one of them as these two methods are the only ways to initiate the SSO.
Here are the directions on how to embed the SSO Initiation Link on a button of your choice
- Create a custom WordPress page
- Embed the Mini Orange Short code on that WordPress page
- Then visit that page while signed out on the website
- Right click on the Mini Orange Button to copy the link
- Place that link on whatever link/menu item that you want to use to trigger the SSO.
The MiniOrange plugin should now be completely configured. If you experience issues, ask the Cobalt Staff member who is assisting you with your SSO implementation.
NOTE:
- If you only bought one MiniOrange license and setup the plugin on a test site, you will need to deactivate and uninstall the plugin to then reinstall and reactivate it on the production site. Do not delete it from the test site or it will become locked and MO Support will need to assist in unlocking it.