Integrating Clari with OneLogin SSO

Overview

Clari supports single sign-on (SSO) using SAML 2.0 compliant third-party providers such as OneLogin. This document specifies the steps needed to enable OneLogin SSO for your enterprise. 

Your company's OneLogin admin should follow the steps below.

Prerequisite

First, as a prerequisite step, send a support ticket to request your company's Audience URI and ACS URL to enable Google SSO.  Once you have these details, proceed with these instructions.

How to Configure Custom SAML App in OneLogin

1. Log into your OneLogin domain as an Administrative user 

2. Click APPS > Add Apps 

3. n the search box, search for and select SAML Test Connector (IdP) Set the Display name of the connector to "Clari" 

4. Upload the rectangle icon (download it here)

5. Upload the square icon (download it here)

6. Click the SAVE button which then updates the screen to include many new tabs 

7. Click the Configuration tab and make the following changes: 

   1. Enter Recipient: https://login.clari.com/sso/saml2

   2. Enter ACS (Consumer) Validator: ^https:\/\/login\.clari\.com\/sso\/saml2\/$

   3. Enter ACS (Consumer) URL: https://login.clari.com/sso/saml2

   4. Enter Audience URI provide by Clari in the support ticket

8. Click SAVE to persist the new changes 

9. Click the SSO tab and email the following information to the Clari team

   1. The “Issuer URL”

   2. The "SAML 2.0 Endpoint (HTTP)" URL 

   3. The "X.509 Certificate" obtained by clicking the "View Details" link

Once this is complete, please provide the SAML App metadata URL to the Clari team in the support ticket you created in the prerequisite ticket above.