Prerequisites:

• A OneLogin subscription with the Advanced Directory add-on.

1. Enable an Asana service account for OneLogin as directed at How to Create and Manage Service Accounts.
2. Copy the Token from Asana’s Edit service account window.
3. Log in to OneLogin as a Super user or Account owner
4. Go to Apps > Company Apps > Asana
5. Complete the relevant tabs as described below.

Configuration

1. Paste the Asana Token you copied earlier into the Service Account Token field.
2. Click Enable. If the connection is successful, the API status icon will switch to

Provisioning

1. Select Enable provisioning for Asana.
2. Select which provisioning actions require admin approval:
   • Create user
   • Delete user
   • Update user
   1. If you choose to require admin approval for any action, an admin user must go to Users > Provisioning and manually approve the action each time it occurs.
3. Choose how deleted and suspended users in OneLogin are handled in Asana:
   • Delete users: Suspend, Delete, or Do Nothing.
   • Suspended users: Suspend, or Do Nothing
4. Under Entitlements, click Refresh.

Parameters

1. Confirm the mapping of Asana attributes to OneLogin attributes.
2. Keep the default OneLogin value of Email for the following parameters:
   • NameID (Subject), which is included in the SAML assertion passed by OneLogin to Asana.
   • SCIM Username, which is used for provisioning.
3. Click Save

To confirm that provisioning from OneLogin to Asana is working, assign Asana to a OneLogin user and go to Users > Provisioning to approve the provisioning event, if necessary. When the user is marked as Provisioned, go to Asana and confirm that the new user has been added.