How To Set Up Your Own OneLogin App (SAML)
Step 1
Log in to your OneLogin account.
Step 2
Navigate to the Administration panel, then go to the Applications tab.
Step 3
Click Add App at the top right of the page.
Step 4
- Search for:SAML Test Connector
- Click on SAML Test Connector (Advanced) to add it.
Step 5
For Display Name, enter your organization’s name and click “Save”.
Step 6
Go to Configuration in the left menu, and enter the following information:
- For the Recipient field, enter:
https://api.logonlabs.com/callback - For the ACS (Consumer) URL Validator field, enter:
https:/\/\api.logonlabs.com/\callback - For the ACS (Consumer) URL field, enter:
https://api.logonlabs.com/callback - Click Save.
Step 7
- Go to Parameters in the left menu, and click the “+” to add parameters
- Add the following parameters:
- Field name: User.FirstName and value: First Name
- check “Include in SAML assertion”
- Field name: User.LastName and value: Last Name
- check “Include in SAML assertion”
- Field name: User.Email and value: Email
- check “Include in SAML assertion”
- Field name: User.PersonImmutableID and value: Onelogin ID
- check “Include in SAML assertion”
- Field name: User.FirstName and value: First Name
- Click “Save”
Step 8
Go to SSO in the left menu, and take note of the following information:
- Issuer URL
- SAML 2.0 Endpoint (HTTP)
- X.509 Certificate (View Details)
Step 9
Go to Users, and add your users to the App.
Step 10
LogonLabs Setup:
- Go to logonlabs.com
- Click Sign In and authenticate (or Sign Up make a new account and authenticate).
- Navigate to Providers, then to Default Rules (or Domain Rules and open/create a domain module).
- Click on the OneLogin button under Enterprise Identity Providers.
- Choose SAML for the protocol.
- Enter a name.
- Enter a description (optional).
- Enter the Issuer URL & SAML 2.0 Endpoint (HTTP) from the OneLogin setup steps above.
- Enter the X.509 Certificate from the OneLogin setup steps above.
- Click Save & close.
- Enable OneLogin by clicking the new entry in the OneLogin Identity Providers list.
