---
title: "SSO with OneLogin"
url: "https://help.productfruits.com/en/article/sso-with-onelogin"
language: "en"
last_updated: "2024-08-14T11:52:35.223Z"
---

# SSO with OneLogin

OneLogin requires an account with admin rights (the rights to create new applications).

## **What we need before beginning**

1.  A SAML 2.0 Endpoint URL (Step 5 in customer configuration below) 
2.  An SLO Endpoint URL (Step 5 in customer configuration below) 
3.  A Certificate (Step 7 in customer configuration below) 
4.  An email Domain(s)

## **Customer configuration with OneLogin** 

1\. Log in to the [OneLogin](https://www.onelogin.com/) Dashboard, and click Applications > Add App.

![The One Login Applications page with Add App highlighted](https://cdn-assets.productfruits.com/4634d3d6-092a-4f44-a07e-3f701d32ed7a)

2\. Search for SAML (SAML Custom Connector (Advanced))

![The One Login Find Applications page with saml being searched](https://cdn-assets.productfruits.com/7c925ee6-6e70-4aab-a56b-fd3fc44bb401)

3\. Change the Display Name to “Product Fruits” (This name will be displayed on the OneLogin login screen) 

![The One Login Add SAML page showing Product Fruits as a new Portal](https://cdn-assets.productfruits.com/ef0c835d-54cf-4324-8310-13c47ac9e514)

4\. Click **SAVE**.

5\. Go to the SSO tab and copy the values for the SAML 2.0 Endpoint (HTTP) and SLO Endpoint (HTTP) 

![The One Login SAML Custom Connector Advanced page with SAML and SLO endpoints highlighted](https://cdn-assets.productfruits.com/500203e1-e0ef-4b1c-9768-2d824561c29e)

6\. Click **SAVE**.

7\. Click on the View Details link in the X.509 Certificate field. 

![The One Login View Certificate Details SSO Screen](https://lh5.googleusercontent.com/G0yvBxXQVEUlhdgRoQJn9TvomEXNowGoHKIqnzYpNddwjTcpURdvDw2k3t4TDAnU4IO9VPnCIXP6xVwDoFc8jZymAsSwKLudVUGuXdDzConjJGarg7sYFOySK6Dz_sFxc2I-tjQtCq6mqKVwJx_RGg)

8\. Download the X.509 certificate.

![The One Login Standard Strength Certificate page showing the option to download the certificate](https://lh5.googleusercontent.com/LPOABO0K7qRtobSbTl8aTAbnLxtDta5liv_LYhtm6HThNVCNjYmqZQ-HWIOD58CJCQ9M_UFuuqM4x3jOmB_vQRZ_BM7TK5fjpRNrWR7e5XD5IoHm0ldTyIYoFvgDkG7q-yYPxNdFlgg1_KkgEBtO-g)

9\. Go to the Parameters tab and map “email” to the NameId and Email (Product Fruits uses the email claim to identify the user) 

![The One Login SAML Custom Connector Advanced page with SAML Custom Connecter NameID value highlighted](https://cdn-assets.productfruits.com/426a3310-dba9-4756-85fb-41d2c6ada21e)

10\. Go to the Configuration tab and setup the Audience (EntityID) and ACS (Consumer) URLs as follows:

ACS (Consumer) URL:

```plaintext
 https://auth.productfruits.com/login/callback?connection=COMPANY_SSO_IDENTIFIER 
```

Audience (EntityID): urn:auth0:productfruits: COMPANY\_SSO\_IDENTIFIER 

(You can find Product Fruits COMPANY\_SSO\_IDENTIFIER under the user management SSO tab) 

![The One Login SAML Custom Connector Advanced page with Audience and ACS Consumer URL highlighted](https://cdn-assets.productfruits.com/eb807b68-2050-42a0-b136-e6cca724f4e2)  
Note: Once we set up SSO for a particular domain the Product Fruits login will automatically redirect all requests to the identity provider side. Make sure you have already set up everything on the OneLogin side and that all values are valid.