Creating an SSO integration for OneLogin

The SSO integration with Oomnitza enables your users to seamlessly access Oomnitza by integrating with OneLogin's Single Sign-On (SSO) solution. 

After you configure and assign the SSO Oomnitza integration, users can use their OneLogin credentials to access Oomnitza, simplifying the login process and enhancing overall security.

Before you start

Before you get started with OneLogin, you need to obtain the X.509 certificate:

1. In the OneLogin admin page, select Applications > Applications from the navigation bar

2. Click Add App

3. Search for the Oomnitza app

4. In the Configuration tab, enter the domain of the Oomnitza instance.  

5. In the SSO tab, click View Details for the Standard Strength Certificate (2048-bit)

6. Download the X.509 certificate

Creating the integration

1. In Oomnitza, click Configuration > Integrations and click Block view
2. On the Integrations page, scroll down to the SSO section.
3. Select OneLogin, and then click Next.
4. Enter your OneLogin SSO URL. For example, https://mycompany.onelogin.com
5. Select Choose file and upload your certificate to Oomnitza.
6. JIT Provisioning: Select this option if you want to support JIT provisioning. JIT provisioning automatically creates a user account the first time users try to log in to applications. Alternatively, you will need to manually create a user account for each new user in Oomnitza. If you select JIT Provisioning, you must also supply the following:
   • Default Role - The default Oomnitza role assigned to the imported or JIT-provisioned users at the time their account is created.
   • Name Identifier - The method used to identify the imported or JIT provisioned user. 
7. SSO only: Select this option if you wish to prevent standard authentication to Oomnitza. This option will remove the username and password option and require that users log in only via OneLogin SSO. We suggest that you do not select this option until you have tested the SSO feature and verified it works correctly.
8. Enable multifactor authentication. Select this option to add a layer of protection to the sign-in process. When accessing Oomnitza, the user will need to provide additional identity verification, such as entering a code received by phone.
9. Click Finish.

Verifying your SSO login

To verify the steps your SSO login, do the following:

1. Navigate to the Oomnitza login page.
2. Click Sign in with OneLogin. Your OneLogin login page should appear.
3. Follow the prompts to verify your identity with OneLogin and log in to Oomnitza.

Related Links

 Global SAML settings