I need allow users to log in on a Drupal site using their Salesforce IDs.
I understand that the Salesforce site will need to be configured as an Identity Provider and will provide a SAML certificate. What I'm not clear on is what to do with the certificate and how to configure the Drupal site to accept the Salesforce user's credentials in the Drupal authentication process.
I found a question on this site, now deleted, where the answer was to use the Salesforce Suite module. The Salesforce Suite module doesn't seem to come with this functionality, but instead seems to map and pull in Salesforce users and map them onto Drupal entities. I have also seen a number of modules with varying degrees of documentation and even one premium(!) module, but I'm still not sure which way to implement.
How do you configure Drupal for SSO?
What do you do with the SAML certificate provided by the IDP?
How do you manage the user roles?