OneLogin SSO

Step 1 — Setup OneLogin SAML Application

1. Go to Applications → Applications and click on Add App on the top right corner.
2. Select SAML Custom Connector (Advanced)

Step 2 — Setup OneLogin Basic SAML Configuration

1. Enter Info including Display Name and Icons as desired and click Save.
2. Click on Configuration.
3. Copy the following URLs & expressions provided on the OneLogin setup page on your Ramp account for:
   1. Audience (EntityID),Recipient, and ACS (Consumer) URL
   2. ACS (Consumer) URL Validator
   3. Login URL
4. Set "SAML Initiator" to "Service Provider"
5. Click Save

Step 3 — Setup SAML Claims

In the Parameters section, add the following claims, make sure to click on Include in SAML assertion Checkbox for each:

• givenName: First Name
• familyName: Last Name
• email: Email

Note: Please make sure to preserve capitalization for claim names above, for example, "givenName". Also, claim values may be vary in your system if they were customized, what’s important is that the Name matches above and values correspond to those in your system:

• givenName: User’s first name
• familyName: User’s last name
• email: User’s email address

Click the Activate button after this is setup.

Step 4 — Setup Metadata URL on Ramp

• From OneLogin, navigate to SSO and copy the Issuer URL

• Paste it on the OneLogin setup page on your Ramp account