OneLogin

Integrate 1Kosmos passwordless authentication with OneLogin using SAML 2.0 — enabling biometric login with Touch ID, Face ID, or LiveID for your OneLogin users.

---

Overview

Enable passwordless, biometric authentication for your OneLogin users using 1Kosmos as a SAML 2.0 Identity Provider. Once connected, users can log in to their OneLogin account using Touch ID, Face ID, or LiveID instead of a password.

Prerequisites

Before starting, make sure you have:

• AdminX portal — Tenant or community admin access to your 1Kosmos AdminX tenant.
• OneLogin portal — Admin access to your OneLogin account.

Integration Steps

Step 1 — Collect IdP Configuration from AdminX

1. Log in to your AdminX portal as a tenant or community administrator.
2. Navigate to Settings → IdP Configuration.
3. Click Configure and note the following details:

Field	Description
IdP Name	Your Identity Provider name (e.g. 1Kosmos)
Signing Certificate	Click View Certificate and copy the Public Key
Single SignOn Service URL	Copy this URL (e.g. https://<your-tenant>.1kosmos.net/adminapi/community/default/sso)
Single Logout Service URL	Copy this URL (e.g. https://<your-tenant>.1kosmos.net/adminapi/community/default/slo)

1. Click Download Certificate to download the Encryption Certificate.

Step 2 — Configure Trusted IdP in OneLogin

1. Log in to your OneLogin portal as an administrator.
2. Navigate to Authentication → Trusted IdPs and click New Trust.
3. Enter a name and click the green checkmark to save.
4. Scroll to Trusted IdP Certificate and paste the Signing Certificate Public Key copied from AdminX.
5. Return to the top of the page and configure the following:

Enable/Disable

• Check Enable Trusted IDP

Login Options

• Check Show in Login panel
• Enter an icon URL (e.g. https://www.1kosmos.com/favicon.ico)

Configurations

Field	Value
Issuer	Enter the IdP Name from AdminX Core Configuration
Sign users into OneLogin	Enabled
Sign users into additional applications	Enabled

User Attribute

• User Attribute Mapping: Select Email from the drop-down menu

SAML Configurations

Field	Value
IdP Login URL	Single SignOn Service URL from AdminX
IdP Logout URL	Single Logout Service URL from AdminX
X.509 Certificate	Select Standard Strength Certificate (2048-bit)

1. Click View Details → Download to save the X.509 Certificate.
2. Copy the following for use in AdminX:

   • SP Entity ID (e.g. https://<tenant>.onelogin.com/sp/<id>)
   • SP Logout URL (e.g. https://<tenant>.onelogin.com/saml/logout/<id>)
3. Click Save.

Step 3 — Add OneLogin as a SAML Application in AdminX

1. In AdminX, navigate to Applications → Add Application.
2. Locate SAML 2.0 Generic under Custom App and click Add Integration.
3. Review the displayed information and click Add Application.

Basic Settings:

Field	Value
Application Name	OneLogin
Instance	Production
Application Access URL	https://<tenant>.onelogin.com/portal

1. Click Next.

SAML Settings:

Under Assertion Statement (NameID), enter:

Field	Value
Format	urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
Value	email

1. Under Claims Mapping, click Add New and enter the following:

Attribute	Format
email	Username
firstname	first_name
lastname	last_name

1. Click Next.

Advanced Options:

Field	Value
Entity ID	SP Entity ID copied from OneLogin
Assertion Consumer Service Method	POST
Assertion Consumer Service URL	https://<tenant>.onelogin.com/access/idp
Signing Certificate	Upload the X.509 certificate downloaded from OneLogin
Signing Algorithm	RSA-SHA256

1. Enable the Assertion option under request/response signing.
2. Click Save.

Step 4 — Test the Integration

1. Completely log out of the OneLogin portal.
2. Navigate to your OneLogin tenant login page.
3. Click the 1Kosmos icon displayed on the login panel.
4. You will be redirected to the 1Kosmos AdminX portal.
5. Authenticate using your 1Kosmos credentials (Touch ID, Face ID, or LiveID).
6. On success, you will be redirected back to the OneLogin portal as an authenticated user.