Configuring SAML for Charles Schwab Compliance Technologies


This topic describes how to configure OneLogin to provide SSO for Charles Schwab Compliance Technologies using SAML.  

  1. Log into OneLogin as an admin and go to Apps > Add Apps.

  2. Search for and select the Charles Schwab Compliance Technologies connector.

    The initial Configuration tab appears.

  3. Click Save to add the app to your Company Apps and display additional configuration tabs.

    The Info tab appears.

  4. Go to the Configuration tab and enter either stage (sandbox) or client (production) in the subdomain field.

  5. Go to the Parameters tab and mapCharles Schwab Compliance Technologies attributes to OneLogin attributes.

    Ensure that Credentials are Configured by admin.

    Ensure that the Charles Schwab Compliance Technologies field NameID are set to the value you use to log into Charles Schwab Compliance Technologies.  This is set to email by default, but could be different for your company.  Check with Charles Schwab Compliance Technologies support if you are unsure.

  6. Click Save if you made any changes on the Parameters tab.

  7. Go to More Actions > Download SAML Metadata to configure your Charles Schwab Compliance Technologies account with OneLogin's SAML settings.  Provide the metadata to Charles Schwab Compliance Technologies support team.  They will configure your account to accept SAML authentication.

  8. On the OneLogin Access tab, assign the OneLogin roles that should have access to Charles Schwab Compliance Technologies and provide any app security policy that you want to apply to Charles Schwab Compliance Technologies.

    You can also go to Users > All Users to add the app to individual user accounts.

  9. Click Save.

  10. Test the SAML connection.

    1. Ensure that you have user accounts in both OneLogin and Charles Schwab Compliance Technologies that use the same value as the username.

      You can create a test user, or you can use your own account if you choose.

    2. Make sure you are logged out of Charles Schwab Compliance Technologies.

    3. Log in to OneLogin as the test user.

    4. Click the Charles Schwab Compliance Technologies icon on your OneLogin dashboard.

      If you are able to access Charles Schwab Compliance Technologies without error, then SAML works.

      Note: It's standard for Charles Schwab Compliance Technologies Support to first test on a sandbox instance and then switch to production.  After successful testing in sandbox, you can make the switch simply by changing the value of the subdomain field (step 4).