Setting Up SSO with OneLogin

Topics included in this article:

• Overview
• Prerequisites
• OneLogin Setup
• Rhombus Console
  • Recovery Users
  • Setup
• Helpful Links
• Contact Support or Sales

Overview

Single Sign-On is a way to sync sign-on across multiple applications, allowing you to log in to all applications with one user account and password.

Rhombus supports any SAML SSO (single sign-on) identity providers. This article covers how to configure SSO with OneLogin.

Prerequisites

To begin setting up Rhombus with OneLogin, you will need:

• A Rhombus account
• A OneLogin account with Super User privileges

Single Sign-On, or SSO, is a way to sync sign-on across multiple applications allowing you to log in to all applications with only one user account and password.

OneLogin Setup

To set up Rhombus with OneLogin, use the template app provided by OneLogin such as the "SAML Test Connector (Advanced)."

1. In OneLogin, navigate to "Apps," click "Add Apps," "Find Application," then search "SAML Test Connector (Advanced)."

2. Select "Info," and change the Display Name to "Rhombus Systems." Enable the "Visible in portal" toggle. Click "Save."

3. Navigate to the "Configuration" tab. To configure the Rhombus app, fill in the following Rhombus information:

4. Select "Parameters," and click "Add Parameters" to add the following values:

NameID = Email

FirstName = FirstName

LastName = LastName

5. Ensure the SAML signature algorithm for the Rhombus app is SHA-256.

6. Add users that have access to the Rhombus Console here. If you do not see a user, you can create a new user within the "Users" tab on the header bar and assign the user to the Rhombus Systems application you created. Click "Save."

7. Navigate back to the "Info" tab and select the "More Actions" dropdown to get the "SAML Metadata." The XML file should download in the following format: onelogin_metadata_1234567.xml

8. Open the XML file in a text editor of your choice and and copy the contents to prepare for the Rhombus Console setup.

Rhombus Console

Recovery Users

A Recovery User is a user account in your organization that bypasses SAML once enabled.

Note: We recommend having at least two Super User Accounts as Recovery Users when enabling SSO to ensure you have a method of logging in and disabling SSO in the event SAML encounters errors.

Enabling a user account as a Recovery User is done during the SSO configuration process, under "Settings" and "Single Sign-On." Click the dropdown menu below that reads "Select SSO Recovery Users." Click the checkbox beside the users you wish to set as Recover Users. Click "Save" when finished.

Setup

1. Navigate to "Settings" and select "Single Sign-On." 

2. Under the Single Sign-On dropdown, enable "Use Single Sign-On." Paste in the XML data from the OneLogin setup into the IDP MetaData XML box and then click "Save."

Helpful Links

• Role Creation and Management

Contact Support or Sales

Have more questions? Contact Rhombus Support at +1 (877) 746-6797 option 2 or support@rhombus.com.

Interested in learning more? Contact Rhombus Sales at +1 (877) 746-6797 option 1 or sales@rhombus.com.