> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/integrations/authentication/pre-built-integrations/onelogin.md).

# OneLogin

***

### Overview

Enable passwordless, biometric authentication for your OneLogin users using 1Kosmos as a SAML 2.0 Identity Provider. Once connected, users can log in to their OneLogin account using Touch ID, Face ID, or LiveID instead of a password.

### Prerequisites

Before starting, make sure you have:

* AdminX portal — Tenant or community admin access to your 1Kosmos AdminX tenant.
* OneLogin portal — Admin access to your OneLogin account.

### Integration Steps

#### Step 1 — Collect IdP Configuration from AdminX

1. Log in to your AdminX portal as a tenant or community administrator.
2. Navigate to **Settings → IdP Configuration**.
3. Click **Configure** and note the following details:

| Field                     | Description                                                                             |
| ------------------------- | --------------------------------------------------------------------------------------- |
| IdP Name                  | Your Identity Provider name (e.g. `1Kosmos`)                                            |
| Signing Certificate       | Click **View Certificate** and copy the Public Key                                      |
| Single SignOn Service URL | Copy this URL (e.g. `https://<your-tenant>.1kosmos.net/adminapi/community/default/sso`) |
| Single Logout Service URL | Copy this URL (e.g. `https://<your-tenant>.1kosmos.net/adminapi/community/default/slo`) |

4. Click **Download Certificate** to download the Encryption Certificate.

#### Step 2 — Configure Trusted IdP in OneLogin

1. Log in to your OneLogin portal as an administrator.
2. Navigate to **Authentication → Trusted IdPs** and click **New Trust**.
3. Enter a name and click the **green checkmark** to save.
4. Scroll to **Trusted IdP Certificate** and paste the Signing Certificate Public Key copied from AdminX.
5. Return to the top of the page and configure the following:

**Enable/Disable**

* Check **Enable Trusted IDP**

**Login Options**

* Check **Show in Login panel**
* Enter an icon URL (e.g. `https://www.1kosmos.com/favicon.ico`)

**Configurations**

| Field                                   | Value                                             |
| --------------------------------------- | ------------------------------------------------- |
| Issuer                                  | Enter the IdP Name from AdminX Core Configuration |
| Sign users into OneLogin                | Enabled                                           |
| Sign users into additional applications | Enabled                                           |

**User Attribute**

* User Attribute Mapping: Select **Email** from the drop-down menu

**SAML Configurations**

| Field             | Value                                               |
| ----------------- | --------------------------------------------------- |
| IdP Login URL     | Single SignOn Service URL from AdminX               |
| IdP Logout URL    | Single Logout Service URL from AdminX               |
| X.509 Certificate | Select **Standard Strength Certificate (2048-bit)** |

6. Click **View Details** → **Download** to save the X.509 Certificate.
7. Copy the following for use in AdminX:
   * **SP Entity ID** (e.g. `https://<tenant>.onelogin.com/sp/<id>`)
   * **SP Logout URL** (e.g. `https://<tenant>.onelogin.com/saml/logout/<id>`)
8. Click **Save**.

#### Step 3 — Add OneLogin as a SAML Application in AdminX

1. In AdminX, navigate to **Applications → Add Application**.
2. Locate **SAML 2.0 Generic** under Custom App and click **Add Integration**.
3. Review the displayed information and click **Add Application**.

**Basic Settings:**

| Field                  | Value                                  |
| ---------------------- | -------------------------------------- |
| Application Name       | OneLogin                               |
| Instance               | Production                             |
| Application Access URL | `https://<tenant>.onelogin.com/portal` |

4. Click **Next**.

**SAML Settings:**

Under Assertion Statement (NameID), enter:

| Field  | Value                                                   |
| ------ | ------------------------------------------------------- |
| Format | `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` |
| Value  | `email`                                                 |

5. Under Claims Mapping, click **Add New** and enter the following:

| Attribute | Format      |
| --------- | ----------- |
| email     | Username    |
| firstname | first\_name |
| lastname  | last\_name  |

6. Click **Next**.

**Advanced Options:**

| Field                             | Value                                                 |
| --------------------------------- | ----------------------------------------------------- |
| Entity ID                         | SP Entity ID copied from OneLogin                     |
| Assertion Consumer Service Method | POST                                                  |
| Assertion Consumer Service URL    | `https://<tenant>.onelogin.com/access/idp`            |
| Signing Certificate               | Upload the X.509 certificate downloaded from OneLogin |
| Signing Algorithm                 | RSA-SHA256                                            |

7. Enable the **Assertion** option under request/response signing.
8. Click **Save**.

#### Step 4 — Test the Integration

1. Completely log out of the OneLogin portal.
2. Navigate to your OneLogin tenant login page.
3. Click the 1Kosmos icon displayed on the login panel.
4. You will be redirected to the 1Kosmos AdminX portal.
5. Authenticate using your 1Kosmos credentials (Touch ID, Face ID, or LiveID).
6. On success, you will be redirected back to the OneLogin portal as an authenticated user.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/integrations/authentication/pre-built-integrations/onelogin.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.