Skip to main content

Configure Directory Manager In OneLogin

Configuring Directory Manager in OneLogin involve the following steps:

  • Create an app for the Directory Manager portal Wizard in OneLogin
  • Configure this app by specifying the consumer URL and audience URL
  • Specify an attribute for authenticating users who use the OneLogin single sign-on option to log into the Wizard portal
  • Define SSO settings

You also have to:

  • Define users in OneLogin, who can authenticate on the Wizard portal using OneLogin.
  • Download the OneLogin metadata file, that will be used to configure the OneLogin provider in Directory Manager.

Create an App for Directory Manager in OneLogin​

  1. Launch OneLogin.
  2. On the Home page, click New App to add a new application in the OneLogin control panel.
    To continue with our example, we will be adding the Directory Manager portal Wizard.
  3. The Find Applications page is displayed, with a list of already created applications. In the Find Applications box, type ‘SAML’ to search for single sign-on applications.
  4. In the search results, select the SAML Test Connector (IdP) option (without any attributes or any sign responses).
  5. On the Add SAML Test Connector (IdP) page, specify a user-friendly name for the application in the Display Name box.
  6. You can also upload an image for the Directory Manager app that will be displayed on the user dashboard in OneLogin.
    When a user logs into OneLogin, he or she will be redirected to the dashboard that will have Directory Manager and other applications listed for single sign-on.
  7. Click Save.
    A message is displayed that the app is added and a few links are displayed under the message. Using them, you can specify certain settings for the app.

Provide consumer URL and audience URL:

  1. Click the Configurations link. The Configurations page for the new app is displayed.
  2. In the ACS (Consumer) URL Validator and ACS (Consumer) URL boxes, provide the consumer URL that you generated for the Directory Manager client Wizard. See the Generate URLs topic.
  3. In the Audience box. provide the audience URL that you generated for the Directory Manager client Wizard.

Specify attribute for user authentication:

  1. Click the Parameters link at the top.
  2. On the Parameters page, Email is already set as the entity ID that will be used for authenticating users who opt to sign into Directory Manager using the OneLogin single sign-on option. Leave all settings to default.

Configure SSO settings:

  1. Click the SSO link at the top.
  2. In the SAML Signature Algorithm list on the SSO page, select SHA-256.
  3. The page also displays the Issuer URL and the endpoint URLs for both the post and redirect methods. You will have to provide the Issuer URL and the SAML 2.0 Endpoint (HTTP) URL while configuring the OneLogin provider in Directory Manager. Copy and paste them in a file, preferably a text file, to save them.

Define users:

  1. Click the Access link at the top. The Policy list displays any policies that you may have configured for users. You can select a policy to enforce it.
  2. Click the Users link at the top. To define and manage users, see the Define Users in OneLogin topic.
  3. Click Save.

Download the OneLogin Metadata File​

You can download a metadata file from OneLogin and import it into Directory Manager to configure the OneLogin provider in Directory Manager.

To download the file:

  1. On the OneLogin Home page, click More Actions in the top right corner and select SAML Metadata. This will download the OneLogin metadata file on your machine.
  2. For convenience, either copy the file to your desktop or save its location, so that you can easily locate it for import into Directory Manager.
    Importing the metadata file will being in all the configurations for the OneLogin identity provider in Directory Manager.

Define Users in OneLogin​

You must define users in OneLogin. Only these users can authenticate on the Directory Manager portal Wizard using OneLogin. See the Sign In Using OneLogin topic.

To define a user:

  1. In OneLogin, click Users in the ribbon at the top; the All Users page is displayed.
  2. Click the New User button.
  3. On the New User page, create a new user, for example, Leo Ferguson. Enter the required information for this user and click Save User to create the user.
    A message is displayed that the user is created and a few links are displayed under the message. Using them, you can specify certain settings for the user.
    Notice that we specified a user name but no password for the user. We will specify it later.
  4. Click the Authentication link.
  5. On the Authentication page, make sure OneLogin is selected in the Authenticated By drop-down list.
  6. In the User Security Policy drop-down list, select Default policy.
  7. Click the Applications link.
  8. On the Applications page, click the plus sign to specify the application that the user (i.e., Leo Ferguson in our example) will be able to log on to.
  9. On the Assign New Login dialog box, use the Select Application drop-down list to select the app that you created for Directory Manager in OneLogin. Then click Continue.
  10. Another dialog box opens to display the user's email. you provided this email while creating the user. Click Save.
  11. Back on the Applications page, click Save User.
  12. Next, you have to update the user’s password in OneLogin. Click the User Info link. Them click More Actions and select Change Password.
  13. On the Change Password dialog box, specify a new password for the user and click Update.
  14. Click Save User.