Frictionless sign-in
Customers use an existing identity without another password.
ID idplug.
EXTENSION
IDENTITY FOR MAGENTO
EXTENSIONIdPlug Customer SSO for Magento 2
One sign-in. A smoother storefront.
Give Magento customers a secure, familiar way to access their accounts using an identity provider they already trust.
IDIDENTITY PROVIDERCompany IdP······COMMERCE PLATFORMMagento
COMMERCE PLATFORMMagentoCAPABILITIES
Identity access that feels native to Magento.
SAML 2.0 and OpenID Connect
Standards-based flows with signature, replay, state and nonce validation.
Account matching
Match existing customers by email, then link by a persistent external subject.
Just-in-time provisioning
Create the customer on first sign-in with mapped name, email and group.
Provider presets
Microsoft Entra ID, Okta, Keycloak, Auth0, generic SAML and generic OIDC.
Diagnostics built in
Test connection, metadata validation, attribute preview and sanitized logs.
HOW IT FITS
Keep your identity stack.
Connect your store.
IdPlug bridges Magento with your identity provider while keeping access rules explicit and manageable. It runs entirely on your servers and sends nothing to us.
- 01
Connect your identity provider
Import SAML metadata or use OIDC discovery. Pick a preset or go generic.
- 02
Define account mapping
Choose the claims that identify the customer and the default customer group.
- 03
Offer a simpler sign-in
Show the SSO button on the storefront and keep native login as a fallback.
SCREENSHOTS
IdPlug Customer SSO in the Magento admin.
Real screens from the current release. Click any image to enlarge.
-
01 Identity provider record: website, protocol and provider preset in one screen. -
02 Sign-in behaviour and OpenID Connect settings with Entra ID tenant discovery. -
03 Attribute mapping from provider claims to the Magento customer identity. -
04 Storefront login with the SSO button next to native sign-in.
PRICING & LICENSING
Free, and the base for the paid modules.
IdPlug Customer SSO is free to install and use, carries no license check and is the dependency for IdPlug Admin SSO and IdPlug SCIM Provisioning. Request access to get the package before the Marketplace listing is live.
- Stores that only need customer SSO
- Customer login federation with Entra ID, Okta, Keycloak or Auth0
- Evaluating the suite before adding a paid module
GUIDES
Read before you roll out Customer SSO.
- Magento Admin Accounts Are an Offboarding Risk: How Admin SSO Fixes ItLocal Magento admin accounts outlive the people who use them. How single sign-on for the Magento admin ties access to your identity provider, with explicit role mapping and a safe fallback.Read the guide →
- SCIM Provisioning for Magento: Automate Onboarding and Offboarding from Entra ID or OktaSingle sign-on creates Magento accounts but never removes them. How SCIM 2.0 lets Microsoft Entra ID and Okta create, update and deactivate Magento customers automatically.Read the guide →
- How to Set Up Microsoft Entra ID Single Sign-On for Magento 2Step by step: connect Magento 2 or Adobe Commerce to Microsoft Entra ID with OpenID Connect or SAML, map claims and groups, test safely and roll out to customers and administrators.Read the guide →
QUESTIONS
IdPlug Customer SSO FAQ.
- Is IdPlug Customer SSO really free?
- Yes. It is free to install and use on any number of stores, has no license key, no time limit and sends no data to us. It is also the required base for the paid IdPlug modules.
- Which identity providers work with it?
- Any SAML 2.0 identity provider or OpenID Connect provider. Presets cover Microsoft Entra ID, Okta, Keycloak and Auth0, and SAML metadata import or OIDC discovery fills in the rest.
- Can customers still sign in with a password?
- Yes. Native Magento login stays available as a fallback per provider, so you can roll SSO out gradually and keep it until a full sign-in test succeeds.
- How are existing customers matched?
- On first sign-in IdPlug matches an existing customer by email, then stores a persistent link to the provider subject. Later sign-ins use that link, never email alone.
REQUEST ACCESS
Get IdPlug Customer SSO
Tell us about your store and identity provider. We reply within one business day with access details, pricing and next steps.
- 01Tell us about your setup
Edition, identity provider and the extensions you need. - 02We confirm fit and pricing
Marketplace listing or a direct license for your production domain. - 03Install and go live
Composer install, provider setup and a Test Sign-in before rollout.
ALSO IN THE SUITE
Pro · SubscriptionIdPlug Admin SSO
Single sign-on for the Magento admin with role mapping, multiple identity providers, headless storefront sign-in and private storefronts.
From $249 / year →
SCIM · SubscriptionIdPlug SCIM Provisioning
SCIM 2.0 server for Magento. Entra ID and Okta create, update, deactivate and group customers automatically.
From $299 / year →