> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/onelogin-sso.md). # OneLogin SSO You can configure OneLogin as your single sign-on SAML provider for logging into DoControl. {% hint style="success" %} After you configure OneLogin as your generic SAML, you can use your OneLogin credentials to login via DoControl. Note that DoControl supports only service provider initiated SSO via DoControl's login page. {% endhint %} To integrate DoControl with OneLogin SSO, you need to: 1. [Create OneLogin connection](#create-onelogin-connection) * [Configure application details](#configure-application-details) * [Configure parameters](#configure-parameters) * [Enable SAML](#enable-saml) 2. [Add a generic SAML connection](#add-generic-saml-connection) ## Create OneLogin connection 1. Login to your OneLogin account, using admin permissions. 2. In your company tab, click **Administration** in the menu bar.
3. Select **Applications > Add app**.
4. Search for **SAML Custom Connector (Advanced)** and click it.
5. Name the connector DoControl and click **Save**.
6. Under **Portal > Tab**, select your company name.
### Configure application details 1. In OneLogin, select **Configuration > Application details**.
2. Enter these values for application details:
Application detailValue
Audience (EntityID)urn:amazon:cognito:sp:us-east-1_Tx9u9xQ4d
Recipienthttps://docontrol-main.auth.us-east-1.amazoncognito.com/saml2/idpresponse
ACS (Consumer) URLhttps://docontrol-main.auth.us-east-1.amazoncognito.com/saml2/idpresponse
Single Logout URLhttps://app.docontrol.io/logout
Login URL https://app.docontrol.io/login
SAML not valid before3
SAML not valid on or after3
3. Keep the remaining fields with their default values and click **Save**. ### Configure parameters 1. In OneLogin, select **Parameters**.
2. For credentials, select **Configured by admin.** 3. Click the **Plus** icon to add the following fields and values to the SAML custom connector: * **Email address** - * **Given name** - * **Surname** - \ \ Make sure that any SAML attribute configured in the SAML integration is also sent from OneLogin. 4. After adding each field, check **Include in SAML assertion** and click **Save.**
### Enable SAML 1. In OneLogin, select **SSO > Enable SAML 2.0**.
2. Copy the **Issuer URL** and paste it in a separate browser window. \ A file will be downloaded to your computer; keep this file for the [next step](#add-generic-saml-connection). 3. On the side bar go to **Users** and make sure to assign and add the relevant people or groups to connect DoControl with your identity provider: * Make sure that all listed people and groups exist in DoControl as team members. * Indicate that user names are case-sensitive. ## Add generic SAML connection SAML (Security Assertion Markup Language) 2.0 is an open standard that allows DoControl to connect to your organization's IdP, such as OneLogin. SAML makes single sign-on (SSO) possible by authenticating a user once and then communicating that authentication to DoControl. {% hint style="success" %} To enable users to login to DoControl with their OneLogin credentials, follow the instructions to configure a [generic SAML](/docontrol-user-guide/system-management/settings/single-sign-on-sso/generic-saml.md). {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/onelogin-sso.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.