Learn how to connect OneLogin with Better Stack to enable single sign-on (SSO) for you and your colleagues.

SSO setup

1. Go to Single Sign-On configuration.
2. Click Connect on the Generic SAML SSO panel and select OneLogin.
3. Note the Entity ID and ACS URL. You will need them in a moment.

In OneLogin

1. Go to the OneLogin Administration panel at https://<your-tenant>.onelogin.com/admin2.
2. Go to Applications → Applications and click Add App.
3. Search for "SAML custom connector" and select SAML Custom Connector (Advanced).
4. For Display Name, enter Better Stack and click Save.
5. In the left menu, select Configuration.
6. For Audience (EntityID), use the Entity ID from Better Stack.
7. For Recipient and ACS (Consumer) URL, use the ACS URL from Better Stack.
8. For ACS (Consumer) URL Validator, enter ^https:\/\/betterstack.com\/users\/auth\/saml\/.*.
9. For SAML encryption method, select AES-256-CBC.
10. Click Save.
11. In the left menu, select Parameters.
12. Add the following parameters, ensuring Include in SAML assertion is checked for each:
    • email mapped to Email.
    • first_name mapped to First Name.
    • last_name mapped to Last Name.
13. In the left menu, select SSO.
14. Copy the Issuer URL and SAML 2.0 Endpoint (HTTP) URL.
15. Under X.509 Certificate, click View Details and Download the certificate.

In Better Stack

1. Go back to the SSO configuration page.
2. For Identity Provider Single Sign-On URL, use the SAML 2.0 Endpoint (HTTP) from OneLogin.
3. For Issuer URL, use the Issuer URL from OneLogin.
4. Upload the certificate file you downloaded from OneLogin.
5. Click Connect. You will be redirected to OneLogin to sign in.

You're done. Your OneLogin Single Sign-On is now configured.