OneLogin

In this document you are going to set up IDmelon as an external IdP to the OneLogin.

alt

Add Identity Provider

alt

Get all values for {..} from your IDmelon panel. If you are currently login here, you will see the replaced values instead.

Issuer : Show in Login panel, idp_issuer_uri
Email Domains : The Email Domains field is used to automatically invoke this Trusted IdP when a user enters their email address at login time - if the email address is unrecognized, but belongs to one of the domains listed, then this TIdP will be invoked via an authentication request (SAML, OIDC or OAuth as appropriate), Example = idmelon.com

alt

To enable Standard mode, check Sign users into OneLogin. This allows inbound identities from the Identity Provider to be matched to local user accounts within the tenant, via responses to the /access/idp endpoint.
To send the user identity within the authentication request sent to the Trusted Identity Provider, check Send Subject Name ID or Login Hint in Auth Request: if the Trusted IdP is configured to use SAML, then the authentication request is sent as a Subject NameID parameter whilst if OIDC or OAuth is used, the same information is sent as a query string parameter called login\_hint. This feature is to provide an improved user experience by avoiding the need for the user to provide an identifier to both OneLogin and the Trusted IdP.
Sign users into OneLogin
Send Subject Name ID or Login Hint in Auth Request
SAML - hard-coded to extract the SAML Subject NameID. It can’t be changed.
User Attribute Mapping : Email

alt

Get all values for {..} from your IDmelon panel. If you are currently login here, you will see the replaced values instead.

Note : please save the configuration then scroll it to continue with certificate part.

You should copy values of below fields from the Okta panel to the IDmelon Panel:

entity id: Copy SP Entity ID
single log out: Copy SP logout url
Assertion Consumer Service URL : https://{your custom subdomain}.onelogin.com/access/idp

alt