Configuring OneLogin as Identity Provider
-
Log in your OneLogin domain and click Applications under the Applications tab.
-
In the displayed page, click Add App.
-
Search for SAML from the search box and select OneLogin SAML Test (IdP) from the search results.
-
Provide a Name and upload a Logo for your application.
-
Click Save.
-
Go to the Configurations tab and enter the details as given below.
|
Attribute in OneLogin |
Attribute in Asset Explorer |
|
SAML Consumer URL |
Assertion Consumer URL |
|
SAML Recipient |
Assertion Consumer URL |
|
SAML Single Logout URL |
Single Logout Service URL |
|
SAML Audience |
Entity ID |
-
Click Save.
-
Open the Parameters tab.
-
Select the username format from the drop-down in the Value field.
-
You can also configure a custom field using the Macro option. The syntax can be found here.
-
Under the SSO tab, you will find the IdP details to be entered in the Asset Explorer application.
-
Enter the details as given below.
|
Asset Explorer Attribute |
OneLogin Attribute |
|
Login URL |
SAML 2.0 Endpoint |
|
Logout URL |
SLO Endpoint |
-
To download the Certificate, click the View Details option under X.509 Certificate.
-
Choose the certificate format as X.509 PEM/X.509 DER and click Download.
-
You can assign the application to various users under the Users tab.
You have now configured Asset Explorer as a service provider in OneLogin.
Go to the SAML configuration page in Asset Explorer and provide the IdP details to complete the integration.