OneLogin SSO supports SSO integrations with OneLogin using the SAML protocol.

Adding in OneLogin

After logging in to your OneLogin account as an administrator, navigate to Applications, click the Add App button, and click SAML Test Connector (IdP w/ attr w/ sign response).

Enter the Display Name, and click Save.

Click Configuration in the left pane, and enter the following values:

(replace SUBDOMAIN with your subdomain)
ACS (Consumer) URL Validator^https:\/\/app\.files\.com\/saml\/consume$
ACS (Consumer) URL

Click Save at the top right to save these changes. Next, click SSO and click View Details under X.509 Certificate.

Change SHA Fingerprint from SHA1 to SHA256 and click Save.

Lastly, copy the SHA256 fingerprint, Issuer URL, SAML 2.0 Endpoint (HTTP), and SLO Endpoint (HTTP) so you can enter these when adding OneLogin in

Adding OneLogin in

Type "SSO Providers" in the search box at the top of every page, and then click on the matching result. Click the Add provider button. Click to select the OneLogin provider.

In the Add provider form, enter Display Name, leave the Metadata URL field empty, and enter the following values copied from OneLogin:

Input the SHA256 fingerprint from OneLogin into the corresponding SHA256 certificate fingerprint field, enter the Issuer URL from OneLogin into the designated field, input the SAML 2.0 Endpoint (HTTP) from OneLogin into the SSO endpoint field, and enter the SLO Endpoint (HTTP) from OneLogin into the designated SLO endpoint field.

Lastly, click the Save button to apply the change.

Note that you can also use more than one OneLogin instance or app connected to your site.

The OneLogin SSO method will now be available when assigning an authentication method for a user in, and the Sign in with OneLogin button will be displayed on your site's login page.

Provisioning Users Automatically

There are two ways to automatically provision users via OneLogin.

SCIM Provisioning

SCIM Provisioning is a standard that allows your Users to be automatically provisioned in from OneLogin. Input the following settings into OneLogin for SCIM:

SCIM connector base URL
Authentication ModeBasic Auth
Basic Auth Username and PasswordEnter a username and password of your choosing

The username and password entered for Basic Auth will also need to be added as the SCIM username and password in Type "SSO Providers**"** in the search box at the top of every page and then click on the matching result. Locate your OneLogin provider entry and edit to set Enable automatic user provisioning via SCIM? to Basic.

After setting the above, your OneLogin users assigned to the application in OneLogin will be provisioned to and should be able to log in to via SSO. offers numerous configuration options for SCIM provisioning, detailed in the Configuration Options section under our SCIM provisioning documentation.

Just-In-Time (JIT) Provisioning

JIT Provisioning operates by generating user records on upon their initial successful login. While this method is simpler than SCIM, it does have limitations. For instance, JIT can provision users but lacks the ability to delete or disable them. will automatically use Just-In-Time (JIT) Provisioning if you don't set up SCIM.

Get Instant Access to

The button below will take you to our Free Trial signup page. Click on the white "Start My Free Trial" button, then fill out the short form on the next page. Your account will be activated instantly. You can dive in and start yourself or let us help. The choice is yours.

Start My Free Trial

©2024 All right reserved


  • Start My Free Trial
  • Pricing
  • Docs
  • API and SDKs
  • Contact


(800) 286-8372


9am–8pm Eastern