Onelogin Integration Setup

Getting Started

BalkanID recommends creating a separate service account for the purposes of this integration, instead of using personal or employee named accounts.

Requirements:

• Client ID

• Client Secret

• Tenant Name

Getting the Configuration

1. Go to your Onelogin Tenant Administration Page.

   
2. Hover over Developers and click API Credentials under it.

   
3. Click on Create New Credential, and give Read all as the permission.

   
4. Click on Save and copy the Client ID and Client Secret.

   
5. Paste both of them on App integration settings on Balkan ID Dashboard

6. Check the URL of your OneLogin tenant, it should be of format https://<tenant-name>.onelogin.com

7. Copy the tenant-name (in this case, its balkanid-dev.

   
8. Paste the same in Balkan ID App Integration setting

Note - For extracting privileges, the required scope is Manage all instead of Read all. Additionally, this requires a subscription to OneLogin that includes Delegated Administration.

Configure Onelogin within your BalkanID tenant

1. Login to the BalkanID application and switch to the tenant you would like to add your integration to.

2. Head to Integrations > Third Party Applications and click Add Integration, select Onelogin. Set up the Primary Application owner and the Description, if any.

   

   
3. Onelogin would have been added to the list of applications. Click on the Configure and Integrate button beside the integration name, and configure the fields with the values that were noted prior. It should look like this:

   
4. Once you filled in the information, click Save changes. Your integration is now configured and you will see the status of the integration displayed alongside other integrations on the Integrations page. Integrations are synced daily. When data is available, the integration Status column will read Connected and the integration Message will read Data available.