Skip to main content

How To: OneLogin SAML

Below describes how to set up OneLogin for Single Sing On with Codefresh using SAML.  If you do not have the SAML option, please create a support ticket enable SAML for the account account. 

Solution:

  1. OneLogin SAML Setup
    1. In OneLogin, go to the Applications Section.
    2. Select ‘Add App’ on the top right.
    3. Search for ‘SAML Custom Connector’ (advanced) and select it.
    4. Add a Display Name (the rest is optional) and Save.
    5. View the SSO Section.
    6. Open a new Tab
  2. In Codefresh, go to Account settings > Single Sign On in the new tab
    1. Select Add Single Sign On > SAML
    2. Enter the Following Information 
      • Display Name = any arbitrary name you want to give in this integration.
      • IDP Entry = SAML 2.0 Endpoint (HTTP) from the SSO section in OneLogin.
      • Application Certificate = X.509 Certificate from the SSO section in OneLogin.
        • Click View Details (preferable open in a new tab).
        • Under X.509 Certificate, click the copy button.
        • Paste the contents into the Application Certificate.
        • Remove the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—–.
    3. Save.
    4. Click edit on the SAML integration we created.
      • Copy the Assertion URL
  3. In OneLogin, view the Configuration Page
    1. Fill in the following 
      • Audience (EntityID) = g.codefresh.io
      • Recipient = Assertion URL
      • ACS (Consumer) URL Validator = Assertion URL but in Regex form. View OneLogin’s Setup Page for more info.
      • ACS (Consumer) URL = Assertion URL
      • Login URL = https://g.codefresh.io/login
      • SAML Initiator = Service Provider
    2. Save

When adding users to the SAML App in OneLogin, make sure the NameID field is equal to the email address.

 

Related articles