Single sign-on · Setup guides
OneLogin
Set up a SAML application in OneLogin and connect it to OrbitID. You need a OneLogin administrator account.
Step 1: Create application
From your OneLogin account, click Applications from the top navigation menu.
If your application is already created, choose it from the list and move to the next step.
If you haven't created a SAML application, click the Add App button to create a new application.
Search for SAML Custom Connector in the Find Applications section. Select SAML Custom Connector (Advanced) from the search results.
Give your application a Display Name and click Save.
Step 2: Configure application
From your application, click the Configuration tab on the left to configure the application.
You have to enter the following values in the Application details section:
- Audience (Entity ID)
- https://saml.orbitid.com
- The SP Entity ID shown in your OrbitID Configuration page. Sandbox uses https://saml.orbitid.com/sandbox.
- ACS (Consumer) URL Validator
- https://app.orbitid.com/api/oauth/saml
- The ACS URL shown in your OrbitID Configuration page. Sandbox uses https://app.orbitid.com/api/oauth/sandbox/saml.
- ACS (Consumer) URL
- https://app.orbitid.com/api/oauth/saml
- The ACS URL shown in your OrbitID Configuration page. Sandbox uses https://app.orbitid.com/api/oauth/sandbox/saml.
Select Service Provider from the SAML initiator dropdown.
Click Save to save the configuration.
Step 3: Attribute mapping
From your application, click the Parameters tab on the left.
You have to configure the following attributes:
| SAML Custom Connector Field | Value |
|---|---|
| id | UUID |
| firstName | First Name |
| lastName | Last Name |
To add the id attribute, click the plus button, enter id in the Field name input and check the Include in SAML assertion checkbox. Click Save to continue.
On the next screen, select UUID from the Value dropdown and click Save.
Do the same for the other attributes (email, firstName, lastName).
Step 4: Download the IdP metadata
Click the dropdown menu More Actions from the top right corner and click SAML Metadata to download the metadata XML file.
Finish in OrbitID
Finish in OrbitID: paste the IdP metadata URL or XML into the connection form (or the Admin Portal link). In the dashboard, open the environment, go to Connections, click New connection, choose SAML and paste the metadata URL or the XML you downloaded. If your customer's admin is following an Admin Portal link, they paste it into the final step of the portal instead.
You can also create the connection with the API: POST /api/v1/sso as described in the quickstart.
