Setting up SAML Single Sign On with OneLogin

In OneLogin

1. Sign in to OneLogin as a OneLogin Administrator.
2. Navigate to and click on Applications on the navigation menu.
3. Search for SAML and select SAML Test Connector (IdP w/ attr w/ sign response).
4. Under Configuration, input the following information:
   1. Leave RelayState blank.
   2. Under Audience, enter the ServiceProvider value as it will be set in the IntelligenceBank Authenticator page (e.g. IB).
   3. Under Recipient, enter the platform URL with /auth appended to the end.
   4. Under ACS (Consumer) URL Validator, enter .*
   5. Under ACS (Consumer) URL, enter the platform URL with /auth?acs appended to the end.
   6. Under Single Logout URL, enter the platform URL with /auth?sls appended to the end.

   

5. Under SSO, copy and paste the following values into IntelligenceBank's Authenticators area under a new authenticator:
   1. Issuer URL into the Name and Host fields.
   2. SAML 2.0 Endpoint (HTTP) into Remote URL (only required if users will access IntelligenceBank from another location, e.g. your intranet or the OneLogin portal, via Single Legged authentication).
   3. SLO Endpoint (HTTP) into SingleLogoutService.
   4. Under the X.509 Certificate field, click View Details. Copy and paste the X.509 Certificate value into CertData, and the Fingerprint value into CertFingerprint.
6. Add the users who should be able to log in to IntelligenceBank under Users.
7. You can set the values to be passed in the assertion, including a Permission Group Mapping field, under Parameters. Make sure Email (SAML NameID) is enabled.
8. Click Save.

In IntelligenceBank

When ready to turn the Authenticator on, update it to Disabled = Off. All users will be enabled as SSO Users by default. To disable SSO authentication for specific users, go to their user profile and enable the IntelligenceBank Login option.