Step by step guide to configure OneLogin as a SAML Identity Provider within Visma

Follow the steps below to configure  OneLogin as a SAML Identity Provider within Visma. Keep Authentication Settings open in your browser while you access OneLogin in a new window or tab. You will need to return to the Single Sign-On page to complete the configuration steps.

Prerequisites

• OneLogin account with Admin rights

• All of your users under your account in Visma will need a pre-existing account in One Login with exactly the same domain email address.

Configure Visma Single Sign-On app in OneLogin

1. On the Single Sign-On page go to section  1. Copy the Visma metadata details into OneLogin

2. Log into your OneLogin administrative portal.

3. Click on  Administration

4. Go on the navigation bar to  Applications and select  Applications.

5. Click  Add App.

6. Search for  SAML Custom Connector (Advanced) and  click on the found search result.

7. Name your application and click  Save.

   

8. On the left menu select  Configuration.

9. While on the “Application details” copy from Authentication Setting section  1. Copy the Visma metadata details into OneLogin the following:

   • Entity ID and paste into the  Audience (EntityID) field in OneLogin

   • SAML Assertion Consumer and paste into the  ACS (Consumer) URL Validator and  ACS (Consumer) URL fields in OneLogin

   • SAML Logout and paste into  Single Logout URL field in OneLogin

   

10. On the left menu click  Parameters.

11. You will need to add two new fields. Click on “ +” symbol to  Add.

12. While on “Parameters” new field, go to Authentication Settings section  2. Configure claims in OneLogin and copy the first attribute name into the  Field name. You will need to repeat the same steps for the second claim.

    

13. Check the box for  Include in SAML assertion.

14. Click  Save.

15. Select the corresponding Attribute Value mentioned in Authentication Settings section  2. Configure claims in OneLogin

    

16. After adding those two fields click  Save.

Configure Visma Single Sign-On to use OneLogin.

1. While on your newly created application in OneLogin, click  More Actions and select  SAML Metadata.

   

2. Upload this Metadata XML file into the section  3.Upload OneLogin metadata into Visma from Authentication Settings. It contains all your OneLogin information that Visma needs in order to complete the setup.

   

3. Continue with your Advanced configuration and click  Save.

   

Testing Single Sign-On after Visma has made its configuration

To make sure SSO is working, perform this step:

1. To test SSO access go to your Visma MyDomain e.g. https://example.my.connect.visma.com directly, and then click the Sign in with OneLogin button.