Setting up SAML Single Sign On with OneLogin

This article is to be used in conjunction with Adding a New SAML Authenticator & Enabling Single Sign On

1. Sign in to OneLogin as a OneLogin Administrator.
2. Navigate to and click on Applications on the navigation menu.
3. Search for SAML, and select SAML Test Connector (IdP w/ attr w/ sign response).
4. Under Configuration, input the following information:
   1. Leave RelayState blank
   2. Under Audience, enter the ServiceProvider value as it will be set in Intelligencebank Authenticator page. e.g. IB
   3. Under Recipient, enter the platform URL and append /auth at the end of it.
   4. Under ACS (Consumer) URL Validator, enter .*
   5. Under ACS (Consumer) URL, enter the platform URL and append /auth?acs at the end of it.
   6. Under Single Logout URL, enter the platform URL and append /auth?sls at the end of it.
      
      
      
      
5. Under SSO, copy and paste the following information into IntelligenceBank's Authenticators area, under a new authenticator:
   1. Issuer URL into Name and Host.
   2. SAML 2.0 Endpoint (HTTP) into Remote URl (only require if users are to access IntelligenceBank from another location, e.g. your intranet or the OneLogin portal, via Single Legged authentication).
   3. SLO Endpoint (HTTP) into SingleLogoutService.
   4. Under X.509 Certificate field, click View Details. Copy and paste X.509 Certificate value into CertData, and Fingerprint value into CertFingerprint.
      
6. Add the users that should be able to login to IntelligenceBank under Users.
7. You can set the values to be passed on in the assertion, including a Permission Group Mapping field under Parameters. Make sure Email (SAML NameID) is enabled.
8. Save.
9. In IntelligenceBank, when ready to turn the Authenticator on, update it to "Disabled" = Off. All users will be enabled as SSO Users by default. To disable SSO authentication for select users, go to their user profile, and enable the IntelligenceBank Login option.