OneLogin SSO

Follow these steps to add OneLogin as the SAML SSO provider for your workspace:

1. Open Buddy SSO settings in one browser tab.
2. In another tab, sign in to the OneLogin admin panel.
3. Open the Applications dropdown menu and select Applications:

4. Click the Add app button:

5. Select SAML Custom Connector (Advanced) from the list. Use the search filter to find this option:

6. Define the app's display name and click Save.
7. Select Configuration from the left navigation panel.
8. Fill in the application details with the data copied from Buddy SSO configuration:
   • ACS (Consumer) URL → ACS / SP Assertion Consumer Service / Single Sign-On URL from Buddy
   • ACS (Consumer) URL Validator → ACS / SP Assertion Consumer Service / Single Sign-On URL from Buddy
   • Audience (EntityID) → SP Entity ID / Audience URI from Buddy

9. Save the changes.
10. Assign users to the application according to your needs. You can do this by clicking this icon:

11. Open the SSO tab in the Application settings and save the data required for SSO configuration in Buddy for later use: Issuer URL, SAML 2.0 Endpoint (HTTP), and the certificate.

To download the certificate, click the View Details hyperlink.

12. Set the SAML Signature Algorithm to SHA-256.

13. Return to the Buddy SSO settings tab and provide the information you copied from the Google admin panel:

    • SSO URL / SAML Endpoint / Identity Provider Single Sign-On URL → SAML 2.0 Endpoint (HTTP) from OneLogin
    • Issuer → Issuer URL from OneLogin
    • Certificate → upload the OneLogin certificate you downloaded
    • Signature / Digest Method → leave at Most popular
14. Click Test configuration and enable SSO on success.
15. Sign in to your OneLogin account to save the SSO configuration.