# OneLogin SSO

Learn how to connect OneLogin with Better Stack to enable single sign-on (SSO) for you and your colleagues.

### SSO setup

1.  Go to [Single Sign-On configuration](https://betterstack.com/settings/sso ";_blank").
2.  Click **Connect** on the **Generic SAML SSO** panel and select **OneLogin**.
3.  Note the **Entity ID** and **ACS URL**. You will need them in a moment.

#### In OneLogin

1.  Go to the OneLogin Administration panel at `https://<your-tenant>.onelogin.com/admin2`.
2.  Go to **Applications** → **Applications** and click **Add App**.
3.  Search for "SAML custom connector" and select **SAML Custom Connector (Advanced)**.
4.  For **Display Name**, enter `Better Stack` and click **Save**.
5.  In the left menu, select **Configuration**.
6.  For **Audience (EntityID)**, use the **Entity ID** from Better Stack.
7.  For **Recipient** and **ACS (Consumer) URL**, use the **ACS URL** from Better Stack.
8.  For **ACS (Consumer) URL Validator**, enter `^https:\/\/betterstack.com\/users\/auth\/saml\/.*`.
9.  For **SAML encryption method**, select **AES-256-CBC**.
10. Click **Save**.
11. In the left menu, select **Parameters**.
12. Add the following parameters, ensuring **Include in SAML assertion** is checked for each:
    *   `email` mapped to **Email**.
    *   `first_name` mapped to **First Name**.
    *   `last_name` mapped to **Last Name**.
13. In the left menu, select **SSO**.
14. Copy the **Issuer URL** and **SAML 2.0 Endpoint (HTTP)** URL.
15. Under **X.509 Certificate**, click **View Details** and **Download** the certificate.

#### In Better Stack

1.  Go back to the [SSO configuration page](https://betterstack.com/settings/sso/edit ";_blank").
2.  For **Identity Provider Single Sign-On URL**, use the **SAML 2.0 Endpoint (HTTP)** from OneLogin.
3.  For **Issuer URL**, use the **Issuer URL** from OneLogin.
4.  Upload the certificate file you downloaded from OneLogin.
5.  Click **Connect**. You will be redirected to OneLogin to sign in.

You're done. Your OneLogin Single Sign-On is now configured.