WordPress Keycloak SSO – Ultimate guide for Keycloak WordPress Login With Secure SAML SSO

Introduction

Are you looking to simplify your WordPress Keycloak SSO Login integration and make user authentication hassle-free? Keycloak WordPress SSO allows your users to log in to your WordPress site using their Keycloak credentials, making the login process simple and efficient. Learn more about WordPress SAML SSO and its benefits.

This guide will take you through the process of setting up Keycloak as your Identity Provider (IdP) and WordPress as your Service Provider (SP) using the Keywoot SAML SSO Plugin. Designed to simplify the Keycloak WordPress SSO setup, this guide provides clear and detailed instructions to ensure everything is configured smoothly, saving you time and effort. Check out our pricing plans to find the perfect solution for your needs.

How to Setup Keycloak WordPress SSO?

Setting up WordPress Keycloak SSO integration enables your users to access your WordPress site using their Keycloak credentials, providing a seamless and secure authentication experience. This guide will walk you through the complete process of implementing Keycloak WordPress login functionality.

By following this step-by-step guide, you’ll simplify the Keycloak WordPress Login process, enabling users to access your WordPress site securely with their existing Keycloak accounts. Whether you’re just starting with Single Sign-On (SSO) or looking to enhance your current Keycloak WordPress Login integration, this guide has everything you need.

Step-by-Step Configuration – Setting Up WordPress Keycloak SSO Integration

1

Installing the WordPress SAML SSO Plugin

To connect your WordPress site with Keycloak, you’ll need to install a WordPress SAML SSO plugin. Here’s how:

Instructions:

1. From your WordPress Dashboard, navigate to Plugins → Add New.
2. In the search bar, type in “Keywoot SAML SSO”
3. you will find SAML SSO Login – WP Single Sign On by keywoot. Click “Install Now” and then “Activate”
4. After installing the plugin, navigate to the SP Metadata tab of Plugin and keep it open. You’ll need the metadata details from this tab for the upcoming configuration steps.

Dashboard → Plugins → Add New → Search for “Keywoot SAML SSO”

Screenshots:

Find the SAML SSO plugin in the WordPress plugin directory

2

Configuring Keycloak as Your Identity Provider (IdP)

Creating SAML Client In Keycloak by Configuring Service Provider (SP) Details in IdP

Instructions:

1. Open your Keycloak Admin Console and select your realm.
2. Go to Clients and click Create Client
3. Choose SAML as the Client type.
4. In the Client ID field, paste the SP Entity ID (Note: you can find SP Entity ID in the SP metadata Tab of SSO Plugin)
5. Enter a name for your application and provide a description.
6. Click Next.

Screenshots:

Enter Login Settings Details:

1. Root URL: Use the Assertion Consumer Service URL (ACS URL) from our plugin. You can find the ACS URL in the SP metadata tab of the SSO plugin.
2. Valid Redirect URIs: Use the ACS URL in this field as well.
3. Click Save

Screenshots:

SAML Capabilities Section:

1. Navigate to Settings Tab and find SAML capabilities Section, make these change
2. Name ID Format: Email
3. Force POST Binding: OFF
4. Force Name ID Format: ON (Make sure this is Turned ON)
5. Click Save
6. Now Go to the Keys tab and turn off Client signature required and then Click Save.

Screenshots:

Go to Advanced Tab and Configure details:

1. In the Advanced Tab, under Fine Grain SAML Endpoint Configuration make the below changes:
2. Assertion Consumer Service POST Binding URL: Use the Assertion Consumer Service URL (ACS URL) from plugin SP metadata Section.
3. Logout Service Redirect Binding URL (Optional): Use the Single Logout URL from plugin SP Metadata Section.
4. Save these Settings

Screenshots:

3

Adding Mappers for User Attributes

Instructions:

1. Go to Client Scopes Tab, select your application, and click Add predefined mapper.
2. Check X500 givenName, X500 surname, and X500 email.
3. Click Add.

Screenshots:

4

Getting Metadata URL

Instructions:

1. Go to Realm Settings in the sidebar.
2. Click on the SAML 2.0 Identity Provider Metadata link.
3. Copy the URL of the metadata page which got opened after clicking (This URL Will be used later).

Screenshots:

5

Configuring WordPress as Service Provider (SP)

Instructions:

1. Go to the Service Provider Setup tab.
2. Enter the Identity Provider Name.
3. Paste the metadata URL copied in the previous step.
4. Click Fetch and save Metadata.

Screenshots:

6

Testing Configuration

Instructions:

1. Click the Test Configuration button to verify if the trust has been successfully established.
2. If a success window appears displaying the user attributes received from Keycloak, Congratulations—your Keycloak WordPress SSO is now configured!

Screenshots:

Important

If you encounter any issues, please reach out to our support team at support@keywoot.com or visit our contact page. We are happy to assist you!