OneLogin SAML Configuration

Configuring OneLogin

For OneLogin configuration, you can follow the steps below:

1. Login to OneLogin using valid credentials.
2. Click Administration.

3. The Administration page will be displayed. Click Applications and select Applications.

 

4. The Applications page will be displayed. Click Add App.

  

5. The Find Applications page will be displayed. Enter Responsive in the search box.

 

6. Click on Responsive. The Add Responsive page will be displayed.

  

7. Click Save.
8. The Responsive page will be displayed as shown. Click Configuration.

  

The page will be displayed as shown.

  

9. Enter value for RelayState.

Note: You can get the value of RelayState from Responsive Organization Settings > SECURITY > SSO. If the SAML SSO feature is not visible, contact your Account Manager.

 

10. Click Parameters
11. Click on the field with value as No Default.

  

12. A pop-up as shown below will be displayed. Select Value as Company from the drop-down options and click Save.

  

The updated value will be displayed as shown:

   

Note: Under Optional Parameters, select the following values from the drop-down: Cost Center: responsive_business_unit (Custom). Role: responsive_user_role (Custom)

13. Click Users from the left navigation pane and click on the user name.
14. The Edit Responsive login page will be displayed.

  

Make the required modifications and click Save. A success message will be displayed as shown below:

  

15. Click Privileges. The page will be displayed as shown:

  

16. Enter a user name and click Check. The user detail will be displayed as shown.

  

17. Click Add Admin. The added user will be displayed as shown.

   

18. Click Save. A success message will be displayed.
19. Click More Actions and select SAML Metadata.

  

20. A confirmation pop-up will be displayed. Select Leave.

  

The metadata file will be downloaded to your computer. 

 

Configuring Responsive

To configure OneLogin, the following configurations must be done in Responsive application.

1. Login to app.rfpio.com with valid credentials.
2. Go to Organization Settings > SECURITY > SSO.

 

3. Click Add New SSO.
4. Enter a name.
5. Select SAML as the SSO Type.
6. Click CHOOSE FILE and upload the downloaded metadata file.
7. Click VALIDATE to validate the uploaded file. A success message Validated! will be displayed.

8. Turn on the toggle switch associated with OneLogin SAML (Disabled).
9. Click SUBMIT.

The OneLogin SAML configuration is complete and the user can use SAML for authentication.

 

Responsive - SAML Login

The user can Login to Responsive using SAML in 4 ways.

 

Login from OneLogin Dashboard

1. From the OneLogin dashboard, click OneLogin Responsive will be displayed as shown below:

2. Click Responsive. You will be navigated to the Responsive application page.

 

Login to app.rfpio.com Using OneLogin SSO

1. Enter the URL app.rfpio.com.

 

2. Click CONTINUE. A page as shown below will be displayed.

 

Login Using an Instance-Specific URL

Contact your account manager to get instance specific URL, which can be bookmarked in your browser.

Just-in-Time Provisioning

With Just-in-Time provisioning, you can use a SAML assertion to create regular and portal users on the fly the first time they try to log in. This eliminates the need to create user accounts in advance. For example, if you recently added an employee to your organization and have provided access to Responsive in your SAML Identity Provider, you don't need to manually create the user in Responsive. When they log in with single sign-on for the 1st time, their account is automatically created for them, eliminating the time and effort with on-boarding the account. The new user can be assigned as Admin or Manager or Team Member role by defining the role in the SAML integration. Choose None, It helps in protecting unauthenticated user login through SAML.

You can also select the default Business Unit for which the SSO login has to be configured (if business unit, a paid add-on has been enabled for your company).

 

Note: Multiple SSO can be created for a single client instance. If interested, raise a support ticket. Once approved the team will enable it for the client.