OneLogin SAML setup

onelogin_instructions.md

1. Add SAML app in OneLogin

1. Log in to the OneLogin Dashboard, and click Apps > Add Apps
2. Search for SAML, and select SAML Test Connector (IdP)
3. Set the Display Name to Percent Pledge
4. Set the Rectangular Icon to our logo which you can find here
5. Click Save

2. Configure SAML app in OneLogin

1. Click Configuration in the left sidebar
   1. Set the Recipient to the URL given to you by your Percent Pledge contact
   2. Set the ACS (Consumer) URL Validator to [-a-zA-Z0-9@:%._\+~#=]{2,256}\.[a-z]{2,6}\b([-a-zA-Z0-9@:%_\+.~#?&//=]*)
   3. Set the ACS (Consumer) URL to the same URL provided for the Recipient field
   4. Click Save

2. Click Parameters in the left sidebar
   1. Add the parameters as mapped below, ensuring the Include in SAML assertion checkbox is checked for each:
      • email -> Email
      • first_name -> First Name
      • last_name -> Last Name
      • uid -> Internal ID
   2. Click Save

3. Click SSO in the left sidebar and pass along the following information to your Percent Pledge contact:
   • Issuer URL
   • SAML 2.0 Endpoint (HTTP)
   • SLO Endpoint (HTTP)
   • X.509 Certificate
     1. In the X.509 Certificate section, click View Details
     2. Ensure the SHA fingerprint is set to SHA-1
     3. Copy the contents of the Fingerprint field and pass it along to your Percent Pledge contact and cc: engineering@percentpledge.org.