This topic describes how to configure OneLogin to provide SSO for It Glue using SAML.

1. 1. In the admin portal, go to Applications > Applications, search and select the IT Glue SAML 2.0 connector. Click Save to add the app to Company Apps.

      

   2. From the Info tab, select the Configuration tab and enter the subdomain of your IT Glue login URL in the Subdomain field. Your ITGlue Subdomain will be the first part of your IT Glue Web Address URL; it can be found in the IT Glue Admin UI under Account > Settings > General.

      

   3. Select the SSO tab. Copy the SAML2.0 Endpoint (HTTP) URL, Issuer URL, and SLO Endpoint (HTTP), then click View Details. Select the clipboard icon to copy the entirety of the SHA-1 Fingerprint, then paste it somewhere you can reference later. The SHA fingerprint must be SHA1, not SHA256.

      

   4. Scroll down and click the clipboard icon next to the X.509 certificate to copy it, including the Begin Certificate and End Certificate portions. Paste it somewhere you can reference later.

   5. Click the Access tab to assign the application to a Role that will allow users to access IT Glue. You will enter the SAML2.0 Endpoint (HTTP) URL, Issuer URL, and SLO Endpoint (HTTP), and SHA-1 Fingerprint in IT Glue to complete the SAML SSO connection. Copy OneLogin SLO Endpoint (HTTP) into the Zoom Sign-out page URL field and copy the OneLogin Issuer URL into the Zoom Issuer field.

Setting up IT Glue

1. Log into your IT Glue account as an admin, then click on Account.
2. Click Authentication under the Settings menu and toggle the Enable SAML SSO slider to the On position, then paste the values you copied from OneLogin under the slider, noting that OneLogin uses the term "SLO Endpoint" for IT Glue's SAML Logout Endpoint URL.

Before you click Save, check:

• All the relevant information is entered in the IT Glue SAML configuration.
• All users that require access have access to the IT Glue application in OneLogin have been accounted for.
• All user emails match between OneLogin and IT Glue.

After you click Save, switch to a private browser/different session from your currently logged in IT Glue session to check your new single sign-on. 

Optional: if you want users to be automatically provisioned to IT Glue when they log on, select the Auto-Provision IT Glue Users option. Once enabled, select a default IT Glue Role for users when they get auto provisioned, then select up to five IT Glue Organizations for users to access when they get auto provisioned.