Set up SSO for OneLogin (SAML)

• Only Admins can use this feature

Setting up a new SSO integration for OneLogin with SAML

You need to be an Admin on TravelPerk and OneLogin to configure a new SSO integration following these steps:

1. Go to Account settings
2. Select Integrations
3. Find the SSO integration and click Set up
4. Select SAML and click New integration

Once you've created a New integration, you'll need to configure it:

1. Go to your OneLogin admin console, select Administration, then Applications and click Add App
   
   
   
   
2. Search for and click TravelPerk SAML 2.0
   
   
   
   
3. Add a description and click Save
   
   
   
   

Your OneLogin configurations for TravelPerk

1. Go back to your OneLogin Administration page and select SSO 
2. Copy the Issuer URL and paste it into the IdP entity ID on TravelPerk
3. Copy the SAML 2.0 Endpoint (HTTP) and paste it into the IdP SSO service URL on TravelPerk
4. In X.509 Certificate, click View Details, copy the x509 cert and paste it into the x509 cert on TravelPerk
   
   
   

TravelPerk configurations for your OneLogin

1. Go back to your OneLogin Administration page and select Configuration
2. Copy the SP entity ID and paste it into the Audience (entity ID)
3. Copy the SP Assertion Consumer Service URL and paste it into the Recipient and ACS (Consumer) URL
4. Click Save
   
   
   
   
5. To find the attribute mapping, go to your OneLogin Administration page and select Parameters
   
   
   
   
6. On OneLogin, click Save
7. On TravelPerk, click Create integration

In OneLogin, you must assign people or groups who need to access TravelPerk. If you don't add them, they won't be able to access TravelPerk using OneLogin.

For more information about customizing your SSO settings, see Customize SSO settings.