# Onelogin Integration Setup

### Getting Started <a href="#h_01h9kym8gxa5qcvrzeh6qh6p34" id="h_01h9kym8gxa5qcvrzeh6qh6p34"></a>

BalkanID recommends creating a separate service account for the purposes of this integration, instead of using personal or employee named accounts.&#x20;

#### Requirements: <a href="#h_01hq2zrmrrsd5bx6a7w83fvt3k" id="h_01hq2zrmrrsd5bx6a7w83fvt3k"></a>

* ***Client ID***
* ***Client Secret***
* ***Tenant Name***

#### Getting the Configuration <a href="#h_01h9kym8gxkbj39qq8xfqxt74p" id="h_01h9kym8gxkbj39qq8xfqxt74p"></a>

1. Go to your *Onelogin Tenant Administration Page*.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FwRNuGSKQ0zOrQbNi5Ji2%2Fimage.png?alt=media&#x26;token=864bd289-5ac8-4258-9d7a-23e7aed9644b" alt=""><figcaption></figcaption></figure>
2. Hover over *Developers* and click *API Credentials* under it.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2F1GkiTiuKuCqmeoDkGGS6%2Fimage.png?alt=media&#x26;token=07dfcb45-9054-45ef-90ce-705b7105bb30" alt=""><figcaption></figcaption></figure>
3. Click on **Create New Credential**, and give `Read all` as the permission.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2Fmk4JCr106AA9lQXWDDdl%2Fimage.png?alt=media&#x26;token=f0fab0ab-cb30-4d15-a127-b43298a1b91a" alt=""><figcaption></figcaption></figure>
4. Click on **Save** and copy the `Client ID` and `Client Secret`.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FwRMjkiNLuKk2w6Vj39jF%2Fimage.png?alt=media&#x26;token=779940ef-ff8b-4fb5-a7b7-43dbf67a7fd3" alt="" width="375"><figcaption></figcaption></figure>
5. Copy and save both of them You will be prompted to enter them on the Application integration settings on Balkan ID.
6. Check the URL of your OneLogin tenant, it should be of format `https://<tenant-name>.onelogin.com`
7. Copy the tenant-name (in this case, its `balkanid-dev` ).&#x20;

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FMBVr65LnkZPrUgaLcw7k%2Fimage.png?alt=media&#x26;token=e867dec0-0892-4722-afeb-e072f3787d74" alt=""><figcaption></figcaption></figure>

8. Paste the same in Balkan ID App Integration setting

{% hint style="info" %}
**Note -** For extracting privileges, the required scope is `Manage all` instead of `Read all`. Additionally, this requires a subscription to OneLogin that includes Delegated Administration.
{% endhint %}

### Configure Onelogin within your BalkanID tenant <a href="#h_01h9kym8gx473whbgskphq8mym" id="h_01h9kym8gx473whbgskphq8mym"></a>

1. Login to the BalkanID application and switch to the tenant you would like to add your integration to.
2. Head to *Integrations* > **Add Integration**, select **OneLogin.**

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FbLS2gFkYq9rIws56IzGY%2Fimage.png?alt=media&#x26;token=955cc40a-e43f-4911-a2a4-c8e2dc27e118" alt=""><figcaption></figcaption></figure>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FoKlVhALVb2sSxFc4Wc0B%2Fimage.png?alt=media&#x26;token=6af7bffe-77cb-4a6d-bb5b-13baaef5d422" alt=""><figcaption></figcaption></figure>
3. Set up the *Primary Application owner (mandatory)* and the *Description*, if any. Set up Secondary Application Owner(s), if any. <br>

   Select the Extraction Type. From here, you can configure your application using one of the following methods:

   1. **Direct integration** - Provide your Onelogin Client ID, Client Secret and Tenant Name obtained above to set up a direct connection with BalkanID.
   2. **SCIM integration** - Provide SCIM server credentials to set up a SCIM connection with BalkanID.&#x20;
   3. **Manual file upload** - Upload Entity and Entity Relations through a .CSV file upload. Contact the team for assistance with this. &#x20;
   4. **Automated upload using API -** You can upload data using our [Bulk APIs](https://developer.balkan.id/) with the help of an API key which will be provided to you. Please refer to the [entity](https://developer.balkan.id/bulk-entities-upload-api-early-access-12828095e0) and [entity relation](https://developer.balkan.id/bulk-entity-relations-upload-api-early-access-12828102e0) upload docs for specific instructions on uploading your data through the API.&#x20;

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FSr3IclzvE2QYfwDponH7%2Fimage.png?alt=media&#x26;token=e3c86707-aa82-4822-add2-c156b6d4b4d9" alt="" width="563"><figcaption></figcaption></figure>
4. Click on next to move onto *Optional Configuration.*
5. Fill **Optional configuration,** if required. &#x20;

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FQHXqDomwJO40kJ1YTYZr%2Fimage.png?alt=media&#x26;token=115c8f51-490c-46da-bbff-3d35e6a30828" alt="" width="563"><figcaption></figcaption></figure>
6. Once you filled in the information, click **Save**. Your integration is now configured and you will see the status of the integration displayed alongside other integrations on the *Integrations* page. When data is available, the integration Status will read **Connected** and the integration Message will read **Data available**.
