Joomla Single Sign-On (SSO for Educational Institutes)

Why miniOrange Joomla OAuth OIDC Single Sign-On (SSO) for Educational Institutes?

With our SSO solution, users can sign in to a Joomla site with a single set of credentials using OAuth/OIDC Protocol, simplifying the login process and improving the user experience.

One of the key advantages of the miniOrange OAuth SSO solution for education is that it allows administrators to define the level of access for every user based on their role in the system. This helps to ensure that sensitive data and resources are only accessible to authorized personnel, reducing the risk of data breaches or other security issues.

Why would you need Single Sign-On (SSO)?

Educational institutes often have multiple Learning Management Systems (LMS) portals and other online resources that students and faculty need to access. With the traditional login method, users are required to remember multiple usernames and passwords, which can be a frustrating and time-consuming process. This is where Single Sign-On (SSO) comes in.

Education providers such as schools, colleges, and universities are the foundation of learning, growth, and development for young generations across the globe. Most educational institutions and school campuses now have Internet access. Teachers now face the growing challenge of managing such a huge number of logins for so many students as a result of the rising use of online learning.

With the help of these Instant Logins, teachers and students can access the majority of the most used apps in today's classrooms with single sign-on or a simple dashboard login. This service is exceptional since it links the sign-on panel with numerous online learning management systems, eliminating the requirement for each student to log in more than once.

In addition, SSO can provide educational institutes with centralized access control, which means that administrators can easily manage user access to multiple applications or systems from a single location.

What is Single sign-on (SSO)?

Single sign-on (SSO) is a user authentication process that allows a user to log in to multiple applications or systems with a single set of credentials. With SSO, users no longer need to remember and enter multiple usernames and passwords, which can save time and reduce the risk of password-related security issues.

What is the OAuth Protocol?

The OAuth protocol is an industry-standard protocol for user authentication and authorization. OAuth allows a user to grant access to their data on one website or application to another website or application, without sharing their username and password. This improves security and reduces the risk of data breaches or other security issues.

What is the OIDC Protocol?

The OIDC protocol, or OpenID Connect protocol, is an identity layer built on top of the OAuth 2.0 protocol. It is designed to enable authentication and authorization for web and mobile applications. OIDC provides a standardized way for users to authenticate with a third-party identity provider, such as Google or Facebook, and then obtain an access token that can be used to access protected resources on the application.

Key Features

OAuth Single Sign-On
Allow students and faculties to authenticate using the OAuth Provider/ Server used in the schools/universities and access all Joomla sites without re-entering credentials for authentication into Joomla on each site.

Multisite Single Sign-On
Enable Single Sign-On (SSO) for an educational multisite of the Joomla network or for individual subsites to allow authentication with the school’s OAuth Provider.

Profile/Attributes Mapping
Allow user information from the OAuth Server to be viewed as profile information for teachers, students, staff, etc. on the Joomla site.

Group-based Content Access
Enable students access to resources or content, depending on the groups to which they belong in the OAuth Server which is used by educational institutions such as schools or universities.

Provisioning / Deprovisioning of Users
Create, Update, Disable, or Delete student and faculty data in real-time on the Joomla site depending on the User present in OAuth Provider.

Groups-based Subsite Access
Allow access to students/teachers of Joomla subsites based on their groups assigned in the OAuth Provider.

Support for Joomla LMS
Integrate Single Sign-On with any Joomla LMS like Learndash, LearnPress, TutorLMS, MemberPress, Teachable, etc., and allow students to log in with their OAuth Server credentials.

Multiple OAuth Provider SSO
Configure Single Sign-On into the Joomla sites of schools/universities using multiple OAuth Servers like Shibboleth, AzureAD, GSuite/Google Workspace, etc.

SSO FOR EDUCATIONAL INSTITUTES SUPPORTED ADD-ONS

We have a variety of add-ons that can be integrated with the Single Sign On for Educational Institutes plugin to improve the OAuth SSO functionality of your Joomla site.

• Keycloak User Sync :- Keycloak User sync allows to synchronize and provision your Joomla users into Keycloak and vice-versa, allowing to create, read, update, delete and deactivate users between Keycloak and Joomla.

• SCIM User Provisioning:- Joomla SCIM enables your users to log in to your Joomla site and sync user creation, update, and deletion from your IDP to your Joomla site using SCIM User Provisioning .

• Attribute Based Redirection Customer :- Attribute Based Redirection Add-on can be used to redirect the user to a specific URL based on the attributes received from the OAuth server.

• Role/Group Based Redirection :- Role/Group-Based Redirection Add-on can be used to redirect the user to a specific URL based on the roles/groups received from the OAuth server.

• SSO Session Management :- SSO session management add-on manages the login session time of your users based on their Joomla roles.

• SSO Login Audit :- SSO Login Audit captures and tracks all the Single Sign-On users and generates reports

• Two Factor Authentication

• User Role Editor

• Limit Login Attempts

• Guest User Login

• Attribute Based Redirection

REST API AUTHENTICATION

Secures unauthorized access to your Joomla sites/pages using our Joomla REST API Authentication plugin .

Firebase Authentication

The Firebase Authentication SDK includes methods for creating and managing users who sign in with their email addresses and passwords.

Dependencies

NONE

24/7 Support

If you require any Single Sign On (SSO) application or need any help with installing this plugin, please feel free to reach out to us on our 24*7 support at joomlasupport@xecurify.com or Contact us. We can also customize the SSO authentication flow to fit the specific needs of your educational institution.

WEBSITE
You can click here to visit our website for more security-related solutions. For more support or info email us at joomlasupport@xecurify.com. You can also submit your query from the plugin’s configuration page.