• IAM
• Implementing Login With Siebel CRM Via API Authentication

Implementing Login With Siebel CRM Via API Authentication

---

Siebel CRM Systems, Inc. is a software company principally engaged in the design, development, marketing, and support of customer relationship management (CRM) applications. At first, known mainly for its sales force automation products, the company expanded into the broader CRM market.

To manage all user accounts Client needed to have a centralized system. They also needed to provide a SSO solution to all users to log into multiple apps seamlessly, where the information is stored in a Siebel CRM system. Without miniOrange, they would have to integrate with Siebel CRM and build a new SSO system from the groundwork. With miniOrange, the Client was able to use their existing System and Data source and even use the SSO feature without any problem. It was built for the Magento system.

How Does it Works?

• The User Navigates to the application of his choice, from which he requires services.
• A SSO request is sent to miniOrange IdP system where required information is stored.
• New User is redirected to the registration form, where he fills all the necessary information like email id, phone number.
• User fills the form, the information is stored in Siebel CRM. Every user in the CRM has a unique Membership ID, which he/she can use to login to desired application.
• For already existing user, fetch the membership ID from CRM.
• Respond with membership ID corresponding to the user details.
• SSO response.
• After receiving SSO response from miniOrange, the app gives access to the users.

Prerequisites

Branding & Customization

• Log into miniOrange Admin Console.
• Click on Customization in the left menu of the dashboard.
• In Basic Settings, set your company domain in Organization Name textfield.
• Click Save. Once that is set, the branded login URL would be of the format https://<company_domain>.xecurify.com/moas/login

Configuration Steps

Implementation of this particular system can be done with any kind of system, but for understanding purpose, we chose WordPress platform into which we will be using Oauth plugin.

• Install miniOrange OAuth Single Sign On plugin in your WordPress site. Activate the plugin, you will see the name on your admin menu.



• Login into miniOrange Admin Console.
• Goto Apps -> Add Application from the side menu.



• click on the OAuth/OIDC tab.



• Search the OAuth2/OpenID Connect App and click on the app.



• You will see the following window, Enter all the details. Copy the Callback/Redirect URL from the plugin page and paste it here. It can vary from user to user. Click on the Save Button.



• Go to the Apps section from the side menu. From the list of apps configured, locate the app you created. You can see the Select > > Oauth Endpoint option present in front of that specific app.



• Copy Client ID, Client Secret, Authorization Endpoint, and Token Endpoint and paste it into plugin page. Click on Save.

Adding Privacy Policy

• Click on the Add Policy tab to add a new policy.
• Go to Policies > App Login Policy from the side menu.



• Select your Application (From drop-down menu). Select Group Name. Enter Policy name. First Factor Type, Password or Mobile, or both. Click on SAVE.

Users Provisioning

• On sidebar menu, You will see “Users” option, hover over it, you will see a small window showing more options. Click on “User Provisioning”.
• Select Custom App Option (from dropdown menu). Set your Endpoint URL. Turn on the “Create User”, “Edit User” buttons. Click on Save.

Testing

• Open plugin for miniOrange OAuth Single Sign On in WordPress.
• Click on Edit Application



• Click on Test Configuration Button.
• Enter your credentials. If everything is OK, it will show details like.



• When user will click on the Login link, he will be redirected to similar page.



• If the User is new to your site, the user needs to create an account first, Clicking on Create an account will result in redirection to the following page.



• When the user will Enter the credentials, he will receive OTP, the page will look something like this.



• After entering OTP, the user will get logged into the application/website.