1.1 Go to the OneLogin admin portal

1.2 Add an application ‘SAML Custom Connector (Advanced)’
This will be the application which handles the SAML login flow to GoBright.

 

2.2 In the OneLogin admin portal, go to the tab ‘SSO’

2.3 Set ‘SAML Signature Algorithm’ to ‘SHA-256’

2.4 Save the settings

2.5 Go to the tab ‘Parameters’

2.6 Add at least the claim for the ‘Name’ of the user:
Claim name: ‘http://schemas.xmlsoap.org/claims/CommonName’
Value: ‘Name’

2.7 Flags: check the checkbox ‘Include in SAML assertion’

3.1 Go back to the tab 'SSO'

3.2 Gather the value of the SAML 2.0 Endpoint (HTTP). You will need this value later on

3.3 At X.509 Certificate, click on 'View Details' and download the ‘SAML Metadata’ file

3.4 Open the downloaded file in a text editor. You will need this later on.

 

4.1 Go to the GoBright Admin Center and click on 'Integrations’

4.2 Open an existing ‘SAML’ integration or create a new integration of type ‘SAML’

4.3 Fill in these items with the values gathered in step 3:

• At ‘Single Sign-on service URL’ paste ‘HTTP-Redirect’ / SAML 2.0 Endpoint (HTTP)
• At 'Single Sign-out service URL' also paste ‘HTTP-Redirect’ / SAML 2.0 Endpoint (HTTP)
• At ‘Token-signing certificate (Base64)’ paste the contents of the downloaded file as text

4.4 Still on the integration page, gather the following values. You will need these later on.

• At Service Provider information:
  • ‘Relying party identifier / Entity Id’
  • ‘Reply URL (Assertion Consumer Service URL)’
    
     
• At Processing settings:
  • ‘Direct login URL’
    

4.5 Save the settings

5.1 Go to the OneLogin admin portal

5.2 Go to the tab ‘Configuration’

5.3 Paste the values gathered in the previous step:

• At Audience (EntityID) paste 'Relying party identifier / Entity Id'
• At ACS (Consumer) URL Validator paste 'Reply URL (Assertion Consumer Service URL)'
• At ACS (Consumer) URL also paste 'Reply URL (Assertion Consumer Service URL)'
• At Single Logout URL paste 'Direct login URL'
• At Login URL also paste 'Direct login URL'

5.4 Set ‘SAML initiator’ to ‘Service Provider’ 

5.5 Save the settings