Configuring SAML authentication settings in OpManager for OneLogin

Listed below are the steps to configure SAML authentication in OpManager (SP) for OneLogin (IdP) with Single Sign-On.

1. Open OneLogin and navigate to Applications tab.



2. Use the search bar and select SAML Custom Connector (Advanced).



3. Open Configuration tab, provide Display Name as OpManager and click on Save.



4. Now, go to OpManager and navigate to Settings -> General Settings -> Authentication -> SAML. Under 'Service Provider' details, copy the Entity ID and the Consumer Assertion URL.



5. Enter ACS (Consumer) URL Validator and ACS (Consumer) URL (copied from OpManager). Select Save.



6. Select Name ID format as Persistent and click on Save.



7. Go to Info tab and click on More Actions drop down menu in the top right corner. Select SAML Metadata to download the metadata file.



8. Now go to OpManager and navigate toSettings -> General Settings -> Authentication -> SAML . Upload the metadata file under Identity provider details and click on Save.



9. If you wish to manually enable SAML, go back to OneLogin and navigate to SSO tab. The required details can be copied from here and pasted in OpManager.



10. Open Parameters tab and select Configured by admin option. Edit Field NameID value as Username and click Save.

Once the above said configurations are done on the IdP side, the required IdP details needs to be configured in OpManager. Click here for steps to configure IdP details in OpManager.

Once the configurations are done on both sides, SAML authentication via OneLogin will be enabled in OpManager. In OpManager's login portal, choose to Login with OneLogin and enter the necessary credentials to login.