IdPlug · SSO and SCIM provisioning for Magento 2
Your identity provider, inside Magento.
Three extensions for Magento Open Source and Adobe Commerce: customer single sign-on, administrator single sign-on, and SCIM 2.0 provisioning. One shared identity model, one attribute-mapping engine, no vendor lock-in.
THE SUITE
Start free. Add what your team needs.
Core · FreeIdPlug Customer SSO
SAML 2.0 and OpenID Connect sign-in for Magento customers, with just-in-time provisioning and attribute mapping.
- One identity provider per website
- SP- and IdP-initiated SSO, secure logout
- Basic attribute and customer group mapping
- CLI diagnostics and support bundle
Pro · SubscriptionIdPlug Admin SSO
Single sign-on for the Magento admin with role mapping, multiple identity providers, headless storefront sign-in and private storefronts.
- Requires IdPlug Customer SSO (free)
- Admin SSO, JIT admin provisioning, role sync
- Unlimited providers, multi-website mapping
- Headless sign-in and private storefront
SCIM · SubscriptionIdPlug SCIM Provisioning
SCIM 2.0 server for Magento. Entra ID and Okta create, update, deactivate and group customers automatically.
- Requires IdPlug Customer SSO (free)
- SCIM 2.0 Users and Groups with PATCH
- Soft deactivation, order history preserved
- Provisioning diagnostics and logs
| Customer SSO | Admin SSO | SCIM Provisioning | |
|---|---|---|---|
| SAML 2.0 and OIDC sign-in | ✓ | ✓ | ✓ |
| Customer SSO and JIT provisioning | ✓ | ✓ | ✓ |
| Identity providers | 1 per website | Unlimited | 1 (unlimited with Admin SSO) |
| Admin SSO and role mapping | — | ✓ | — |
| Headless and private storefront | — | ✓ | — |
| Advanced attribute mapping | Basic | ✓ | ✓ for SCIM |
| SCIM 2.0 users and groups | — | — | ✓ |
| Deactivation and group sync | — | — | ✓ |
| Price, Magento Open Source | Free | $249 first year, then $299 / year | $299 first year, then $349 / year |
| Price, Adobe Commerce | Free | $349 first year, then $399 / year | $399 first year, then $449 / year |
| Optional installation service | $50 | $149 Open Source, $199 Adobe Commerce | $99 Open Source, $199 Adobe Commerce |
HOW TO BUY
Marketplace or direct.
Same extension.
All three extensions are submitted to the Adobe Commerce Marketplace. While the listings are in review, we license directly: tell us your production domain, receive the Composer packages and an invoice, and install the same code that will ship on the Marketplace.
- 01
Request access
Describe your store, identity provider and the extensions you need.
- 02
Receive packages and license
Composer packages for your production domain, with the Commercial License Agreement.
- 03
Install and verify
Configure the provider, run Test Sign-in and diagnostics, then roll out.
GUIDES
Guides to identity on Magento.
- Magento Admin Accounts Are an Offboarding Risk: How Admin SSO Fixes ItLocal Magento admin accounts outlive the people who use them. How single sign-on for the Magento admin ties access to your identity provider, with explicit role mapping and a safe fallback.Read the guide →
- Private B2B and Employee Storefronts in Magento: Require Sign-in with Your Identity ProviderHow to close a Magento storefront to everyone except signed-in customers, with sign-in through Entra ID, Okta or a B2B customer's own identity provider, and what to watch for with caching and APIs.Read the guide →
- SCIM Provisioning for Magento: Automate Onboarding and Offboarding from Entra ID or OktaSingle sign-on creates Magento accounts but never removes them. How SCIM 2.0 lets Microsoft Entra ID and Okta create, update and deactivate Magento customers automatically.Read the guide →
- How to Set Up Microsoft Entra ID Single Sign-On for Magento 2Step by step: connect Magento 2 or Adobe Commerce to Microsoft Entra ID with OpenID Connect or SAML, map claims and groups, test safely and roll out to customers and administrators.Read the guide →
- SAML vs OpenID Connect for Magento SSO: Which Should You Use?SAML 2.0 and OpenID Connect both give Magento single sign-on. How they differ, what each needs from your identity provider, and how to choose for customer and admin sign-in.Read the guide →
QUESTIONS
Before you ask.
- How do I buy?
- The three extensions are listed on the Adobe Commerce Marketplace and are pending review. Until the listings are live, request access and we will issue a direct license for your production domain, with an invoice from Cloudstack Solutions SRL.
- What does one subscription cover?
- One production Magento installation plus any number of development, staging, testing and CI environments that serve it. See the Commercial License Agreement for the exact terms.
- Does it phone home or need a license key?
- No. The extensions run entirely on your servers, contain no license check and send no data to us. Identity data stays between your store and your identity provider.
- Which identity providers are supported?
- Presets for Microsoft Entra ID, Okta, Keycloak and Auth0, plus generic SAML 2.0 and generic OpenID Connect. SCIM provisioning is tested with Entra ID automatic provisioning and Okta lifecycle management.
- Which Magento versions?
- Magento Open Source and Adobe Commerce 2.4.8 and newer on PHP 8.4. Installation is through Composer.
REQUEST ACCESS
Request access to IdPlug
Tell us about your store and identity provider. We reply within one business day with access details, pricing and next steps.
- 01Tell us about your setup
Edition, identity provider and the extensions you need. - 02We confirm fit and pricing
Marketplace listing or a direct license for your production domain. - 03Install and go live
Composer install, provider setup and a Test Sign-in before rollout.