Setting up OneLogin SAML SSO with Spekit? This guide provides a general overview of what the SAML SSO connection process involves.
⚠️ Important: This guide provides a general overview of the SSO connection process and should not be used as a step-by-step configuration guide. To set up SSO with Spekit, go to the Connect page within your Spekit Web App and proceed through the in-app setup walkthrough.
📌 Quick-Jump Topics
- Step 1: Create a SAML Application: Setting up the SAML app in OneLogin
- Step 2: Configure SAML Settings: Entering ACS URLs and SAML configuration values
- Step 3: Configure Parameters: Mapping user attributes for the SAML assertion
- Step 4: Upload the Metadata File: Downloading and uploading the SAML metadata to Spekit
Step 1: Create a SAML Application
How do I create the SAML application in OneLogin?
- Log in to the OneLogin Admin Dashboard.
- Select the Applications tab in the top navigation bar.
- Click Add App in the top-right corner.
- Search for and select SAML Custom Connector (Advanced) as the application type.
Step 2: Configure SAML Settings
How do I configure the SAML settings in OneLogin?
- Click the Configuration tab from the left sidebar.
- Copy the ACS URL Validator value from your Spekit in-app walkthrough and paste it into the corresponding field.
- Copy the ACS URL value from your Spekit in-app walkthrough and paste it into the corresponding field.
- Ensure the SAML Initiator is set to OneLogin.
- Ensure the SAML Signature Element is set to Assertion.
- Optionally, enter https://app.spekit.co/app/generate as the Login URL.
💡 Tip: Setting the Login URL is optional but recommended as it provides a direct entry point for users logging into Spekit via SSO.
Step 3: Configure Parameters
How do I map user attributes for the SAML assertion?
- Click the Parameters tab from the left sidebar.
- Add the required fields and their mapped values as specified in your Spekit in-app walkthrough.
- For each attribute pair, ensure the Include in SAML assertion checkbox is checked.
Step 4: Upload the Metadata File to Spekit
How do I download the SAML metadata file and upload it to Spekit?
- Click the SSO tab from the left sidebar.
- Click More Actions in the top-right corner.
- Select SAML Metadata. An XML file will download to your computer.
- Upload this XML file into the corresponding step of your Spekit in-app SSO walkthrough.
ℹ️ What's next? After uploading the metadata file, you can test the configuration in the next step of the in-app walkthrough. From there:
- If you plan to use JIT (Just-in-Time) user provisioning, you are done but you must notify Spekit Support that you will be using this provisioning type.
- If you plan to use SCIM provisioning, a separate SCIM walkthrough is available in Spekit for you to complete.