Use OneLogin as your Identity Provider

Overview

After enabling Onum as a service provider, you can set up OneLogin as an identity provider for SAML. You need to create a SAML app in your OneLogin account to register your Callback URL so that OneLogin can send SAML responses to the correct location.

Set up your custom OneLogin app

To activate OneLogin as an identity provider for SAML authorization, you need a OneLogin administrator account.

1

Log in to your OneLogin admin portal. In the left menu, click Applications > Add App.

2

Choose SAML Custom Connector (Advanced) for a generic setup. Enter a display name (e.g., MyApp SAML) and optionally upload an app icon. Click Save.

3

In the Configuration tab, OneLogin asks you for service provider details:

Onum will not show the required Callback URL until you enter the identity provider details, so we will enter a placeholder URL here.

Parameter	Description
ACS (Consumer) URL / SP Entity ID (Audience URI)	Enter a temporary URL in these fields (eg, https://placeholder.example.com/saml/acs). You can copy the Callback URL if you already know it, or just use a dummy placeholder. We'll edit these fields later with the real value.
SAML NameID format	Select Email Address.
SAML NameID value	Select Email.

Click Save when you're done.

4

Once the app is created, OneLogin provides you with the IdP metadata.

Now access Onum and go to the Authentication area in your Admin menu. Once there, click the Configure Single-Sign-On button and select SAML in the Authentication method field. Enter the following in the fields that appear:

Parameter	Description
IdP Entity ID	Enter the Issuer URL from your OneLogin app.
Single Sign-On URL	Enter the SAML 2.0 Endpoint (HTTP) from your OneLogin app.
Certificates	Paste the X.509 Certificate from your OneLogin app.

Now click Save. You'll be given a Callback URL.

5

Go back to your OneLogin account and access the Configuration tab. Replace the placeholders with the real Callback URL you got in Onum and save changes.

6

Finally, go to Users > your app > Applications > Add and assign the app to users or groups so they can log in with SSO.

Done! Onelogin is now your identity provider for Onum.