OneLogin SSO Configuration

Step by Step guide for integrating Razor with OneLogin

This guide summarizes the steps required to enable OneLogin SSO integration with Razor. For a deeper dive into configuring OpenID Connect in OneLogin, you can refer to the official documentation here: OneLogin OIDC App Configuration Guide.

Supported Features

  • Authentication Only

Provide access to your full Razor Tenancy using OneLogin’s single sign-on authentication platform. This integration allows your users to securely sign in using their existing OneLogin credentials.

1. ON-BOARDING

As part of your Razor on-boarding, your tenant is configured for traditional user/password access by default. For your users to authenticate using OneLogin Single Sign-On (SSO), they must already exist in your Razor account under User Settings. Attempting to authenticate via OneLogin without this prior configuration will result in a failed login attempt.

2. ADD OCCAM RAZOR INTEGRATION TO ONELOGIN INSTANCE

Log in to your OneLogin Admin Console.

From the top menu, go to “Applications” and click “Add App”.

 

In the app catalog, search for “OpenId Connect (OIDC)”.

Select the app named “OpenId Connect (OIDC)” and click “Save” to begin setup.

Populate the application setup form with the following details in your OneLogin Admin Console:

Name: A descriptive name (e.g. Razor SSO)
Sign-On Method: OpenID Connect (OIDC)
Redirect URI: https://amer.occam.global/users/auth/onelogin/callback


Your redirect URI will vary based on the URL you use to access Razor. Please replace the root domain as appropriate (e.g. https://CUSTOM_RAZOR_DOMAIN/users/auth/onelogin/callback)

 

Once the application is created, navigate to the “SSO” tab to retrieve your Client ID and Client Secret.

Client ID – Copy this value.

Client Secret – Copy this value.

Issuer URL – Copy this value

You’ll need these values to configure Razor’s SSO settings.

3. CONFIGURE ONELOGIN IN RAZOR

Log into your Razor Admin Console.

Navigate to Company Settings.

Once in the editable form for your company settings, scroll down to the OneLogin Integration section.

Scroll to the OneLogin Integration section.

Enter the following:

Client ID: (Paste from OneLogin)

Client Secret: (Paste from OneLogin)

OpenID URL: Enter the base OIDC Issuer URL (e.g., https://your-subdomain.onelogin.com/oidc)

4. SIGN IN

Once your settings are saved, after logging out you can access the OneLogin SSO Integration, via the sign in link.

 

Enter the email that you are registered to Razor with, and click “Go To OneLogin”

Login to your OneLogin Instance. You will be redirected back to Razor once authentication is complete.

Read about Azure SSO Config Guide and OKTA SSO Config Guide here.