# OneLogin

## OneLogin Configuration

The first step regardless of installation method is to configure your SAML 2.0 identity provider.

You must have OneLogin developer account.

Configure OneLogin

1. Log in to the [OneLogin](https://www.onelogin.com/) Dashboard, and click Administration. Then Applications > Add App.
2. Search for SAML, and select SAML Test Connector (IdP).
3. When prompted, change the Display Name of your app.  Enter an application name and description. You can also upload a Keeper Connection Manager logo.  Click save.
4. Go to the Configuration tab, Update 3 fields: Recipient, ACS (Consumer) URL Validator, and ACS (Consumer) URL with your KCM server URL and /api/ext/saml/callback on the end as shown below.

![](/files/N3R9omBVmg5zkI5bIiMc)

5. Click on the More Actions dropped-down menu.  Select SAML Metadata to download and save the .XML file. 
6. Under the Users tab on the top, find the users that need to log in using SSO, click into them and on the applications tab on the left, add the new SAML application to them.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/keeper-connection-manager/authentication/authenticating-users-with-saml/onelogin.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.