How can I configure SAML in Vtiger?

To log in via your SAML server, you must add Vtiger as a service in your SAML-based IDP and simultaneously configure SAML in Vtiger.

Since each one of us might use a different IDP, let’s take the example of OneLogin to enable SAML login in Vtiger.

Follow these steps to enable SAML login in Vtiger using OneLogin: 

Step 1: Enable SAML login in Vtiger.

1. Click the User Menu on the top right corner of the screen.
2. Click the Settings button.
3. Look for the User Management section.
4. Select Authentication.
5. Click the Edit icon on the Authentication page.
6. Enable the checkbox beside SAML.

Step 2: Perform the OneLogin setup.

7. Log in to OneLogin.
8. Click the Applications tab.
9. Select Applications.
10. Click the Add App button.
11. Search for SAML Test Connector using the search bar.
12. Select SAML Test Connector (IdP w/ attr w/ sign response).
13. Set up a display name, icon, and other basic details. 
14. Click Save.

Step 3: Set up SAML in Vtiger.

15. Click the SSO tab in OneLogin.
16. Click View Details under X.509 Certificate in OneLogin.
17. Copy the certificate and paste it into X.509 Certificate in Vtiger.
18. Copy the following from OneLogin and paste them in Vtiger:
    • Issuer URL into IDP Entity ID
    • SAML 2.0 Endpoint (HTTP) into IDP SSO URL
    • SLO Endpoint (HTTP) into IDP SLO URL
19. Click Save in Vtiger.
20. Click the Configuration tab in OneLogin.
21. Copy the following from Vtiger and paste them in OneLogin:
    • SP ACS URL into ACS (Consumer) URL Validator
    • SP ACS URL into ACS (Consumer) URL
22. Insert a backslash (\) before each forward-slash (/) in ACS (Consumer) URL Validator to make it a regular expression.
23. Click Save.

The NameID parameter in OneLogin is used to identify users. Vtiger expects the NameID parameter to be of the type Email and verifies it against the value in the Username field in Settings > Users.

Follow these steps to set the NameID value:

1. Click the Parameters tab in OneLogin.
2. Select Email (SAML NameID).
3. Select Email from the Value dropdown.