Onelogin SSO

This pages describes configuring Lenses with Onelogin SSO.

Groups are case-sensitive and mapped to roles, by name, with OneLogin

Integrate your user roles with Lenses using the Keycloak role names. Create a group in Lenses using the same case-sensitive role name as in OneLogin.

For example, if the Engineers role is available in OneLogin, create a group with the same name.

Set up OneLogin IdP

Lenses is available in the OneLogin Application catalog.

Visit OneLogin’s Administration console. Select Applications > Applications > Add App

1. Search and select Lenses

2. Optionally add a description and click save

Add Lenses via the Application Catalog

1. In the Configuration section set the base path from the url of the Lenses installation e.g. lenses-dev.example.com ( without the https://)

2. Click Save

Download the IdP XML file

1. Use the More Actions button

2. Click and download the SAML Metadata

3. You will reference this file’s path in the security.conf configuration file.

security.conf

lenses.security.saml.idp.metadata.file="/path/to/OneLoginIDPMetadata.xml"