Welcome to OneLogin. To understand how OneLogin works, see Introducing OneLogin. To get your organization up and running on OneLogin right away, follow these instructions:
1. Sign up for a OneLogin account
For plans and pricing, see https://www.onelogin.com/product/pricing.
2. Get a subdomain
When you've created your OneLogin account, the setup wizard opens.
Click Claim Your Subdomain to open the Branding page in the OneLogin admin portal.
If you want to skip the wizard, you can go directly to Settings > Branding.
Enter a subdomain in the Company Name field.
Click Save. To return to the setup wizard, click the logo in the banner.
3. Import and add users
Import users from your organization's user directory or add users to OneLogin manually.
Importing users from a directory: Typically, you import and sync users from your organization's existing directory service, like Active Directory (AD), LDAP, Workday, or Google Apps. Click Import from Directory from the setup wizard (or go to Users > Directories and click the New Directory button) to open the Select a Directory Type page, where you can start setting up OneLogin to import users. For full instructions, see the instructions for your directory in Directory Integration.
Adding users manually: If you prefer to use OneLogin as your primary user directory, click Add Users Manually from the setup wizard (or go to Users > All Users and click the New User button) to open the New User page, where you can create users directly in OneLogin. For full instructions, see Adding Users Manually.
Important! Even if you use a third-party directory like AD, you must create at least one administrative user account in OneLogin that is reserved entirely for administering OneLogin and does not exist in your third-party directory. This prevents administrators from being deprovisioned or locked out of OneLogin if there are issues with the third-party directory. It is never good practice to give owner-level or admin-level permissions to your user account--the one you use to access the apps you need in the course of everyday work.
When you have finished creating or importing users, click Save. To return to the setup wizard, click the logo in the banner.
4. Add apps
Choose from a catalog of thousands of cloud applications that you can make available to your users.
Click Add Apps from the setup wizard (or go to Apps > Add Apps) to open the Find Applications page, where you can browse or search for the applications you want OneLogin to manage.
When you select an app, the Add App_Name page lets you update the display name that users will see when they look for the app in their OneLogin portal and, for some apps, lets you choose the authentication method (SAML, form-based, API).
When you click Save, the app is added to your account and all app configuration and information pages become available. While many apps have similar configuration requirements, you should consult the App Integration help for your app to get complete configuration instructions.
You can skip final app configuration and go to the next step to assign apps to users, but OneLogin will not provide working single sign-on until you finish configuring your apps.
5. Assign apps to users
You can assign apps to users one at time, or you can assign multiple apps to a user based on the user's role. A role represents a group of apps, usually organized around job function. Most organizations have enough users to benefit from using roles.
To add apps to users one at a time:
Go to Users > All Users.
Select a user.
Go to the Applications tab and click the + plus sign to assign an app to the user.
If app authentication is form-based, OneLogin asks you for the app username and password. For some apps, you can enter app-specific user attrributes. See the App Integration help for app-specific details.
After you have assigned an app, it appears in the user's Applications list. Provisioning status (pending, provisioned, failed) is displayed for the apps that allow user provisioning.
To add apps based on a user's role:
Create a role.
Go to Users > Roles and click New Role. Name the role and select the apps you want to include in the role.
Add the role to the user.
Go to Users > All Users and select the user. On the user's Applications page, select the Role.
The apps included in the role are added to the user's list of applications.
Advanced option: Map directory groups to roles
If you use a third-party directory like Active Directory with OneLogin, you can assign app access by mapping directory attributes (like memberOf an Active Directory group) to OneLogin roles. For more information, see Mappings.
6. Sign in to your first app
Go to App Home. It's the page that opens when you log into https://mycompany.onelogin.com or when you click the icon on the left side of banner (the OneLogin logo—or your company's logo if you custom-branded OneLogin).
Click an app. If you configured it correctly, OneLogin authenticates you, the app opens, and you'll be down to business.
Click New App to add your own personal apps like LinkedIn or Twitter. Personal apps are completely hidden from IT.