OneLogin SAML

Steps

If you're self-hosted, replace https://app.secoda.co with your domain.

1. In the OneLogin console go to Applications > Add App and search for "SAML Custom Connector (Advanced)" and select the option.

2. Name the app Secoda and click Save.

3. In the Configuration tab set the Audience, Recipient, and ACS consumer paths to the endpoints provided by the https://app.secoda.co/settings/security page.

Configuration tab values. These values are an example, do not copy these values.

1. Go to the Parameters tab and add a new parameter by clicking the + button. Add the email, ` firstName, and lastName parameters.

Check "Include in SAML assertion" for all of these parameters

The Parameters page after completing the step

1. Check "Both" for the SAML signature element field.

Both signatures must be enabled

1. Change the SAML Signature Algorithm to SHA-256. Then save all of your changes. Copy the Issuer URL and submit that on https://app.secoda.co/settings/security as the Metadata URL with SAML Provider Generic.

Set SHA-256

Once the Secoda team approves your request, you will be able to go to navigate to Secoda, click “Sign in with SAML”, and enter your domain to complete sign-in.