---
title: "OneLogin SSO Configuration Guide"
slug: "onelogin-sso-configuration-guide"
status: "new"
updated: 2026-09-10T17:26:40Z
published: 2026-09-10T17:26:40Z
canonical: "support.skykit.com/onelogin-sso-configuration-guide"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.skykit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# OneLogin SSO Configuration Guide

| This feature is available in the following plans: |
| --- |
| ✖ Base | ✖ Pro | ✔ Enterprise |

**Impact: Before You Enable OneLogin SSO**

Enabling OneLogin SSO affects all assigned users who use the Skykit application. They will need to log in with Skykit using OneLogin.

**Requires an OneLogin Administrator**

Completing the configuration requires an administrator.

## OneLogin Setup for SP-initiated Login

Here’s a step-by-step guide to setting up your OneLogin application.

1. Log into your OnLogin Account.
2. Go to the Applications tab and click Add App.
3. Search for “SAML Custom Connector (Advanced).”
4. Set the Display Name to “Skykit Login.”

### Application Configuration

Fill out the configuration fields as followed. If a field isn’t listed below, leave it as the default or empty.

- RelayState: (leave empty)
- Audience (EntityID): onelogin-skykit
- Recipient: [https://login.skykit.com/__/auth/handler](https://login.skykit.com/__/auth/handler)
- ACS URL Validator: ^https:\/\/login\.skykit\.com\/__\/auth\/handler$
- ACS URL: [https://login.skykit.com/__/auth/handle](https://login.skykit.com/__/auth/handle)
- Single Logout URL: (leave empty)
- Login URL: [https://accounts.skykit.com?saml=onelogin.[COMPANY_NAME].name](https://accounts.skykit.com?saml=onelogin.[COMPANY_NAME].name)
- SAML Initiator: Service Provider
- SAML nameID Format: email
- SAML Issuer type: Specific
- SAML encryption method: AES-256-CBC
- SAML signature element: Response
- SAML sessionNotOnOrAfter: 1440
- Encrypt assertion: (uncheck)
- Generate AttributeValue tag for empty values: (uncheck)
- Sign SLO response: (uncheck)
- Sign SLO Request: (uncheck)

## Setting Up User Attributes

You need to map user information from OneLogin to Firebase. This data is included in the SAML assertion.

1. Click on the Parameters tab.
2. Create the folowing new parameters and map them to the corresponding OneLogin user fields. Make sure to check “Include in SAML assertion” for each one.
  1. email > Email
  2. firstName > First Name
  3. lastName > Last Name

## SSO and Certificate

Configure the SSO settings and provide the certificate.

1. Go to the SSO tab.
2. X 509 certificate: Choose Standard Strength Certificate (2048-bit).
3. SAML Signature Algorithm: SHA-256.
4. Login Hint: Check this box.
5. Login Connection Display: Uncheck this box.
6. Assumed Sign-in: Uncheck this box.

### Obtaining and Uploading SAML Metadata

1. From the same SSO tab, you’ll need to get the Issuer URL, SAML 2.0 Endpoint (HTTP), and the SAML Metadata.
2. Click More Actions > SAML Metadata. This will download the metadata file.
3. Save the downloaded file. You’ll need to provide this information and the metadata file to the Firebase team.

## Assign User to Application

To allow users to log in, you will need to add users to the application.

1. Navigate to the application you created.
2. On the left navigation, select “Users.”
3. Add users to Application.