Setting up Single Sign-On with Onelogin.

The portal allows administrators to set up single sign-on (SSO) with Okta or One-Login.  If you are setting up SSO with an Okta account:

1. Log into your Onelogin administrator portal and go to “Administration”:

   

2. Select “APPS” from the top menu:

   

3. Click “Add Apps” on the dropdown menu:

   

4. Search for the 3GRC application:

   

5. Select the 3GRC application and configure its display name then click the “SAVE” button:

   

6. Select the “Configuration” tab and enter your 3grc portal URL. This should be the full URL including https://. Next click the “SAVE” button:

   

7. Select the “SSO” tab and you will get the settings you require for the 3GRC platform. The “Issuer URL” is the identity provider identifier for the 3GRC platform and the “SAML 2.0 Endpoint” is the single sign-on URL.  After you have copied these, click the “SAVE” button and then click "View Details":

   

8. Copy the “X.509 Certificate” and click the "SAVE' button:

   

Once you have copied the copied the certificate, you should see our article on activating Single Sign-On within the 3GRC platform.