This topic describes how to configure OneLogin to provide SSO for Lucidchart using SAML. (If you want to set up SSO for Lucidchart with form-based authentication, see Adding a Form-Based Application.)

1. Log in to OneLogin and go to Apps > Add Apps.

2. Search for Lucidchart and select it.

3. On the initial Configuration tab, in the Connectors section, select SAML2.0 - user provisioning.

4. Click Save to add the app to your Company Apps and display additional configuration tabs.

5. On the Configuration tab, enter your Lucidchart Domain value.

   For example, acme.com. Do not enter a full URL. This value tells OneLogin where to send the SAML message in Lucidchart.

   

6. Click Save.

7. On the Parameters tab, map Lucidchart user attributes to OneLogin attributes.

   

   Some parameters are included in the SAML assertion during SSO, others are used when provisioning users to Lucidchart using the Lucidchart SCIM API. For SSO using SAML, you should accept the defaults, unless otherwise noted:

   Lucidchart Field	Default OneLogin Value	SAML or Provisioning?	Notes
   First Name	First Name	SAML
   Last Name	Last Name	SAML
   NameID (Subject)	Email	SAML	Leave Value set to Email. Most Lucidchart implementations use email as the NameID.
   SCIM Username	Email	Provisioning	See Provisioning Users to Lucidchart.
   User can edit charts	- No default -	Provisioning	See Provisioning Users to Lucidchart.

8. On the Access tab, assign the OneLogin roles that should have access to Lucidchart and provide any app security policy that you want to apply to Lucidchart.

   You can also go to Users > All Users to add the app to individual user accounts, and return to this app configuration page to complete SSO configuration.

9. Click Save.

10. On the SSO tab, copy the X.509 certificate that you'll need to provide in Lucidchart.

    To copy the X.509 certificate, click View Details and click the Copy to Clipboard icon for the X.509 Certificate.

    

    If you want to use a different certificate, go back to the SSO tab, click Change, select the new certificate, and follow the above instructions.

    Alternatively, you can create an entirely new X.509 certificate for selection by going to Settings > Certificates and clicking New.

11. Go to Lucidchart and complete the setup as described here.

12. Test the SAML connection.

    1. Make sure you are logged out of Lucidchart.

    2. Give yourself access to the Lucidchart app in OneLogin.

    3. Log in to OneLogin.

    4. Click the Lucidchart icon on your OneLogin dashboard.

    5. If you are able to access Lucidchart, then SAML works.

Next steps:

Provisioning Users to Lucidchart