Skip to main content
OneLogin is an identity provider (IdP) you can connect to Sevalla with SAML single sign-on (SSO). You add a SAML Custom Connector (Advanced) app in OneLogin with the values Sevalla shows, then paste OneLogin’s values into Sevalla. For how SSO works in Sevalla, see Single sign-on.

​
Before you begin

  • You’re a company owner or admin in Sevalla.
  • You can add applications in OneLogin’s administration.
  • Your Sevalla account uses an email address on your company’s domain, and you have a OneLogin user with the same address. The setup test signs you in with it.

​
Values to copy

From Sevalla’s Create SAML app step into the OneLogin app’s Configuration tab: From the OneLogin app’s SSO tab into Sevalla’s Sevalla setup step:

​
Start the setup in Sevalla

1

Open the wizard

In the sidebar, under Company, click Single sign-on. On the Single sign-on card, click Enable (or Continue setup).
2

Go to the values

Click Continue to reach Create SAML app. Keep this tab open: you’ll copy its values into OneLogin.

​
Create the SAML app in OneLogin

1

Add a SAML connector

In OneLogin’s administration, go to Applications > Applications and click Add App. Search for SAML Custom Connector, then select SAML Custom Connector (Advanced).
2

Name the app

In Display Name, enter Sevalla. Optionally, upload the Sevalla logo as the icon. Click Save.
3

Fill in the configuration

Click the Configuration tab and fill in the fields from Values to copy. Also set SAML issuer type to Specific and SAML signature element to Assertion. Leave the other fields as they are and click Save.
4

Add the parameters

Click the Parameters tab. For each of these rows, click the + button, enter the Field name, select Include in SAML assertion and click Save. Then pick the Value and click Save.
5

Set the signature algorithm

Click the SSO tab, set SAML Signature Algorithm to SHA-256, then click Save.
OneLogin's Parameters tab with the firstName and lastName custom parameters mapped to First Name and Last Name

​
Give people access to the app

Only people with access to the app can sign in to Sevalla with OneLogin.
  • By role: on the app’s Access tab, turn on the roles whose users get the app, then click Save.
  • One person at a time: go to Users > Users, click the person, click Applications, then click the + button. Pick the Sevalla app, click Continue, select Allow the user to sign in, and click Save.
Include yourself, so you can run the test.

​
Add the OneLogin details to Sevalla

1

Open the SSO tab

In Applications > Applications, click the Sevalla app, then click the SSO tab.
2

Verify your email domain in Sevalla

In the Sevalla tab, click Continue to reach Sevalla setup. Under Email domain, add and verify your domain. See Verify your email domain.
3

Paste OneLogin's values

Under Set up Sevalla SAML, paste:
  • SSO URL: OneLogin’s SAML 2.0 Endpoint (HTTP)
  • Entity ID: OneLogin’s Issuer URL
  • Public certificate: under X.509 Certificate, click View Details and copy the whole certificate, including the BEGIN CERTIFICATE and END CERTIFICATE lines
Click Continue.
OneLogin's SSO tab with the X.509 certificate, SHA-256 signature algorithm, issuer URL and SAML 2.0 endpoint

​
Test and set SSO live

On Test and finish, click Test authentication and sign in to OneLogin. When Sevalla shows Authentication test was successful., click Save and set SSO live. If the test fails, see Troubleshoot SSO sign-in. Next, you can make SSO mandatory and turn on just-in-time provisioning.

​
Change the session length

The SAML sessionNotOnOrAfter field on the app’s Configuration tab sets how long an SSO session lasts, in minutes. OneLogin’s default is 1440 minutes (24 hours). Change the value and click Save; it applies to the next SSO sign-in.