Configuring OneLogin with Addigy as a Custom SAML App

Note: This workflow is only for configuring access to the Addigy web app via SAML single sign-on. It is not for configuring Addigy Identity.

Configuring OneLogin as a custom SAML app lets your team log into the Addigy web app using their existing OneLogin credentials, instead of a separate Addigy password.

How to Gather Required URLs in Addigy

Before configuring anything in OneLogin, initiate a new SAML app in Addigy to generate the two URLs you'll need later.

1. Make sure you're logged into Addigy as a user with privileges to create and modify Integrations.
2. Navigate to Account > Integrations.
3. In the Log In Options section, select New SAML App. 
   

4. Copy the Entity ID and the Assertion Consumer Service (ACS) URL somewhere you can reference them — you'll need both in the next section. 

   d

How to Configure OneLogin

Create the App

1. Log in to your OneLogin portal, select Applications, then Add App. 
   
2. Search for SAML Custom Connector and choose SAML Custom Connector (Advanced). You can change the logo and rename the app to something more identifiable if you'd like, then click Save in the top right. 
   

Edit the Configuration

1. With the app created, navigate to the Configuration section. You'll insert the URLs you copied from Addigy into four fields: 
   
   • Audience (EntityID): your Entity ID from Addigy.
   • Recipient: your Assertion Consumer Service (ACS) URL from Addigy.
   • ACS (Consumer) URL Validator: a specially formatted version of your ACS URL. To format it, paste your ACS URL into this JSON-escape tool and use the output here.
   • ACS (Consumer) URL: the same value as Recipient (your ACS URL).
2. Scroll down to the SAML initiator field:
   • If you're using Service Provider–initiated (SP-initiated) SSO, set this to Service Provider.
   • If you're using IdP-initiated SSO, set this to OneLogin. Setting it to Service Provider will prevent logging in from your IdP portal.

Edit the Parameters

Addigy needs three parameters to properly create a new user. To add one, click the plus button on the far right.

Mirror the field names shown below for each parameter, and make sure Include in SAML assertion is checked for each one.

Download the Certificate and Gather the SSO URL

The last pieces come from the SSO section of the app configuration.

1. Click View Details to download the certificate. 
   
2. On the page you're redirected to, download the X.509 PEM file.
3. Back in the SSO section, copy the SAML 2.0 Endpoint (HTTP) URL for the next step.

How to Finalize the Setup in Addigy

1. Upload the .pem certificate you downloaded from OneLogin.
2. Paste the SAML 2.0 Endpoint (HTTP) URL into the SSO Url field. 
   
3. If you're using IdP-initiated SSO, check the box to allow it.

Frequently Asked Questions

Can I use OneLogin with Addigy Identity?

No. OneLogin is not currently a supported Identity Provider for Addigy Identity. Supported providers are Okta, Google, and Microsoft Entra.

What is automatic user provisioning?

It allows your IdP to create new Addigy users automatically, using the default role defined in the SAML app settings in Addigy. If this setting is disabled, users who don't already have an Addigy account can't complete the SAML assertion.

I keep getting looped back to the Addigy login page — why?

This is almost always a misconfiguration. Double- and triple-check that every URL above is in the correct field.

• If automatic user provisioning is disabled, confirm the user attempting the SAML assertion already has an account in Addigy.
• If you're using IdP-initiated SSO, confirm Allow IdP-Initiated SSO is checked in Addigy and the SAML Initiator field is set to OneLogin in OneLogin.