Administrator single sign-on
Centralize administrator sign-in through the company identity provider.
ID idplug.
EXTENSION
IDENTITY FOR MAGENTO
EXTENSIONIdPlug Admin SSO for Magento 2
Secure the admin. Map access deliberately.
Connect Magento administration to your identity stack with single sign-on, explicit role mapping and multi-provider support.
IDIDENTITY PROVIDERCompany IdP······COMMERCE PLATFORMMagento
COMMERCE PLATFORMMagentoCAPABILITIES
Identity access that feels native to Magento.
Explicit role mapping
Translate identity groups into Magento admin roles, with optional sync on every sign-in.
Multiple identity providers
Several SAML and OIDC providers, with priority and a default per website.
Headless storefront sign-in
Registered return URLs, one-time code and token exchange over REST or GraphQL.
Private storefront
Require sign-in for a whole website, with configurable open pages.
Advanced attribute mapping
Custom attributes, nested claims, multi-value attributes and transformations.
HOW IT FITS
Keep your identity stack.
Connect your store.
IdPlug bridges Magento with your identity provider while keeping access rules explicit and manageable. It runs entirely on your servers and sends nothing to us.
- 01
Connect the identity system
Reuse the provider configured in Customer SSO or add dedicated admin providers.
- 02
Map roles deliberately
Only roles the mapping manages are assigned. Nothing is claimed implicitly.
- 03
Roll out to staff
Enable admin SSO per provider and keep native admin login as a controlled fallback.
SCREENSHOTS
IdPlug Admin SSO in the Magento admin.
Real screens from the current release. Click any image to enlarge.
-
01 Magento admin login with a Sign in with Microsoft Entra ID button. -
02 Per-provider sign-in area, admin provisioning and role sync settings. -
03 Admin role mapping from provider groups with explicit priorities. -
04 Headless storefront sign-in with registered return URLs and token exchange. -
05 Advanced attribute mapping with transformations and customer group mapping. -
06 Private storefront: require sign-in for a website with configurable open pages.
PRICING & LICENSING
One subscription per production domain.
The subscription covers one production Magento installation plus any number of development, staging, testing and CI environments that serve it. Buy through the Adobe Commerce Marketplace once the listing is live, or request a direct license from us today. Prices are the same as on the Marketplace and exclude VAT.
- Magento admin SSO for staff and agencies
- Admin role mapping and sync from directory groups
- Headless or PWA storefronts and private B2B storefronts
GUIDES
Read before you roll out Admin SSO.
- Magento Admin Accounts Are an Offboarding Risk: How Admin SSO Fixes ItLocal Magento admin accounts outlive the people who use them. How single sign-on for the Magento admin ties access to your identity provider, with explicit role mapping and a safe fallback.Read the guide →
- Private B2B and Employee Storefronts in Magento: Require Sign-in with Your Identity ProviderHow to close a Magento storefront to everyone except signed-in customers, with sign-in through Entra ID, Okta or a B2B customer's own identity provider, and what to watch for with caching and APIs.Read the guide →
- How to Set Up Microsoft Entra ID Single Sign-On for Magento 2Step by step: connect Magento 2 or Adobe Commerce to Microsoft Entra ID with OpenID Connect or SAML, map claims and groups, test safely and roll out to customers and administrators.Read the guide →
QUESTIONS
IdPlug Admin SSO FAQ.
- Do I need IdPlug Customer SSO as well?
- Yes. Admin SSO builds on the free Customer SSO module, which Composer installs as a dependency. There is nothing to reconfigure when you add it.
- Can admin SSO lock existing administrators out?
- No. Native admin login can remain as a controlled fallback, and role sync only changes administrators whose current role is managed by the mapping. Break-glass accounts are left alone.
- Does it work with headless or PWA storefronts?
- Yes. A storefront registers its return URLs, receives a one-time code after sign-in and exchanges it for a customer token over REST or GraphQL.
- What does one subscription cover?
- One production Magento installation plus any number of development, staging, testing and CI environments that serve it.
REQUEST ACCESS
Get IdPlug Admin SSO
Tell us about your store and identity provider. We reply within one business day with access details, pricing and next steps.
- 01Tell us about your setup
Edition, identity provider and the extensions you need. - 02We confirm fit and pricing
Marketplace listing or a direct license for your production domain. - 03Install and go live
Composer install, provider setup and a Test Sign-in before rollout.
ALSO IN THE SUITE
Core · FreeIdPlug Customer SSO
SAML 2.0 and OpenID Connect sign-in for Magento customers, with just-in-time provisioning and attribute mapping.
Free →
SCIM · SubscriptionIdPlug SCIM Provisioning
SCIM 2.0 server for Magento. Entra ID and Okta create, update, deactivate and group customers automatically.
From $299 / year →