OneLogin SAML SSO Configuration

1. Create developers OneLogin Account.
2. After the registration go to Applications page and push Add App button.
   
3. In the search field print "SAML" and select SAML Test Connector (Advanced).
   
4. Save application.
5. Navigate to SSO tab. There are three URLs and certificate on this page. We need two of thisthese URLs (Issuer URL and SAML 2.0 Endpoint (HTTP)) and certificate.
   

6. Open Rubex on another tab (or browser) and navigate to SAML configuration (Admin -> Settings -> Single Sign-On Settings).

7. Create new SAML configuration.

8. Fill Issuer field with value from OneLogin Issuer URL, Saml Endpoint with value from SAML 2.0 Endpoint (HTTP), Entity ID with any url. Aslo specify SAML Attribute Name for Groups (attribute where all user groups will be listed, usually Group) and upload OneLogin certificate downloaded on step 5
   

9. Save configuration and open it again. Save Login URL from the bottom of this page.

10. Back to OneLogin. Navigate to Configuration tab.

11. Fill Audience (EntityID) with the same URL like in Entity ID Rubex SAML Configuration, Recipient, ACS (Consumer) URL and Login URL with Login URL from Rubex SAML Configuration. Save configuration.
    

12. Navigate to Parameters tab and add Group attribute (Do not forget to select Include in SAML Assertion)
    .
    Push Save button. On the next window select default value for this attribute (It can be any user attribute (default or custom)) and save it again.

13. Save all configuration again.