# OneLogin Configuration

{% hint style="info" %}
For a 100% cloud-based integration with OneLogin, see [Keeper SSO Connect Cloud](https://docs.keeper.io/sso-connect-cloud/)
{% endhint %}

{% hint style="success" %}
Be sure to first perform the steps in the [Admin Console Configuration](https://docs.keeper.io/sso-connect-cloud/admin-console-configuration) section.
{% endhint %}

### Setup:

Login to the OneLogin portal.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUVyluLe_hVwH08ed%2F1.png?alt=media\&token=42aefca3-cf43-4ab1-89e9-ca83b83240f1)

Select Administration to enter the admin section.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUYCGVtB0fiaDaQDu%2F2.png?alt=media\&token=ed8ecd25-e97c-47a0-b9e3-f21bb1dc3124)

From the onelogin menu select **Applications** then **Add App**.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBU_CO4fsIxkwzm91m%2F3.png?alt=media\&token=3ab797bf-31ad-475f-99a1-64015fdd19de)

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUcfj51t-pIS1YTdx%2F4.png?alt=media\&token=75a3ce64-fbc0-4db5-89c0-2fa5f050dba5)

In the Search field, do a search for **Keeper Password Manager** and select it from the search result.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUejfXsSEO6pAQx94%2F5.png?alt=media\&token=41c3607b-c6c1-4022-94e8-9daa14f1e0fe)

On the **Add Keeper Manager** screen click Save.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUgwfun4cc9qQe8RS%2F6.png?alt=media\&token=f38ad238-c37d-4e19-bd09-708a848a1188)

The next step is to download the SAML Metadata from OneLogin. Select the down arrow on the **MORE ACTIONS** button and select **SAML Metadata**.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBUjUOk_aBO8QgcCP6%2F7.png?alt=media\&token=30e26bd6-4c80-4ff1-b0d3-947a7949bae8)

The **onelogin\_metadata\_######.xml** file will download to the browser. Copy this file to the Keeper SSO Connect server interface.

<div align="left"><img src="https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-LU2XMIWxEapTee8NpLo%2F-LU2YYjiJ8OP2xaAssVb%2Fsso-step-106b.png?alt=media&#x26;token=d6252bae-fb0d-46c3-a064-3df50fb92db5" alt=""></div>

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-LU2XMIWxEapTee8NpLo%2F-LU2_gqZjSYntPn8BLpZ%2Fsso-step-109b.png?alt=media\&token=9534d25a-b18b-44a7-95e9-9cbcc6e405b2)

On the OneLogin Configuration tab, type in the Assertion Consumer Service Endpoint from your Keeper SSO Connect server: (i.e. <https://DOMAIN:8443/sso-connect/saml/sso> where **DOMAIN** is the server name or IP address of your Keeper SSO Connect application) then click **Save**.

![Assertion Consumer Service (ACS) Endpoint](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBYMQ_lIanp4Svh1uJ%2F-MWBfM54QZD6lIntdL11%2FScreen%20Shot%202021-03-19%20at%203.48.46%20PM.png?alt=media\&token=692c9372-773f-437e-8158-36e173f1a8d0)

Back on the Keeper Provisioning tab, click on "Add Method" and select SCIM.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBVgCGwwrKzm10AWJG%2F9.png?alt=media\&token=573fb7ed-4c6d-43ab-a20b-f5aeb69d4146)

Click Generate then copy the URL and Token.

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBVjgJTvapMC5VZBHM%2F10.png?alt=media\&token=0c915aa7-d093-4b5c-bcbd-25954a0db02a)

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBU0y-JyX9yrqVmheu%2F-MWBVmV6kHTuv7durtEL%2F11.png?alt=media\&token=a54051f7-477d-496e-948f-70bd6722268c)

![](https://2635959690-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LTyMp7XGU8wh-hRPBiB%2F-MWBYMQ_lIanp4Svh1uJ%2F-MWBffJc-OT8mY1bcNcB%2FScreen%20Shot%202021-03-19%20at%203.49.34%20PM.png?alt=media\&token=c667829c-7cc9-46bc-8725-1a358a80e677)

Paste the "URL" into the **SCIM Base URL**, and paste the "Token" into the **SCIM Bearer Token** then click **Save.**

Click **Save** on the Keeper Admin Console and the integration is complete.
