Configure SSO with OneLogin
Before you begin — Read SSO Integration: How It Works first. Each user's Sfax Username must equal their email address.
In OneLogin, add an app using the SAML Custom Connector (Advanced).
| OneLogin field | Value |
|---|---|
| Audience (EntityID) | https://app.sfaxme.com/ |
| ACS (Consumer) URL | https://app.sfaxme.com/sso/sso.aspx |
| ACS (Consumer) URL Validator | ^https:\/\/app\.sfaxme\.com\/sso\/sso\.aspx$ |
| NameID value (Parameters tab) | |
| SAML NameID Format |
Common pitfalls
- A NameID value set to something other than the email.
- The SAML signature not set to sign the assertion - the assertion must be signed.
- An ACS URL Validator regex that doesn't match the ACS (blocks the response).