Configuring OneLogin Secure Single Sign-On Integration with SAML

This guide shows you how to configure OneLogin and Acunetix Premium+ for Single Sign-On.

OneLogin is a cloud-based identity and access management company that offers enterprise-level companies and organizations a unified access management (UAM) platform.

How to configure OneLogin with SAML

There are two parts to this procedure:

• Part 1: Add Acunetix to OneLogin
• Part 2: Configure OneLogin Single Sign-On Integration with SAML

How to add Acunetix to OneLogin

1. Log in to OneLogin.
2. From the main menu, go to Applications > Applications > Add App.

3. On the Find Applications page, search for "test connector" and select SAML Custom Connector (Advanced) from the search results.

4. On the Add SAML Custom Connector (Advanced) page, enter a name for your app and optionally change icons and enter a description. (For this illustration, we use Acunetix.)
5. Turn on the Visible in portal toggle.

6. Click Save.

After saving, your app is listed on the applications page.

How to configure OneLogin Single Sign-On Integration with SAML

1. Log in to OneLogin.
2. From the main menu, select Applications > Applications.
3. Select your app from the list. (For this illustration, select Acunetix.)

4. Open a new tab and log in to Acunetix.
5. From the Acunetix menu, select Settings > Users & Access > SSO.  
6. Turn on the Enable SSO toggle.
7. Select OneLoginSecure from the SSO Provider drop-down list.
8. In the OneLogin tab, from the left menu, select Configuration.
9. In the Acunetix tab, copy the SAML 2.0 Service URL and paste it into the ACS (Consumer) URL Validator field on the OneLogin tab.
10. In the Acunetix tab, copy the Identifier URL and paste it into the ACS (Consumer) URL field on the OneLogin tab.

11. Select Save in the OneLogin tab.
12. From the left menu in the OneLogin tab, select Parameters.
13. Click + (the plus sign).
14. On the New Field dialog, enter user.FirstName to the Field name.
15. Select Include in SAML assertion. Then click Save.
16. On the Edit Field user.FirstName dialog, select First Name from the Value drop-down. Then click Save.

17. On the SAML Custom Connector (Advanced) page, select SSO.
18. From the SAML Signature Algorithm drop-down, select SHA-256.
19. Copy the Issuer URL field. Then paste it into the IdP Identifier field in Acunetix.
20. In the OneLogin tab, copy the SAML 2.0 Endpoint (HTTP) URL. Then paste it into the SAML 2.0 Endpoint field in Accunetix.

21. In the OneLogin tab, select View Details in the X.509 Certificate section.

22. Copy the X.509 Certificate information and paste it into the X.509 Certificate field in Acunetix.
23. In Acunetix, if you select Require encrypted assertions, do one of the following:

1. Select Generate a new certificate for me; OR
2. Select I have an existing certificate, then upload your certificate and enter the certificate password.

24. On the OneLogin page, select Save to save the settings.
25. From the Acunetix SSO Exemptions drop-down, you can select specific users to exempt them from SSO. Doing this means the selected users can log in to Acunetix via password.
26. Click Save on the Acunetix tab to complete the integration.

Acunetix informs you that the SSO configuration is saved.

Now, you can add users to the Acunetix application in OneLogin, so they can log in to Acunetix thanks to the Single Sign-On.