The document describes the base line configurations to setup an integration with our Identity Access Management System (IAM) and your Identity Provider (OneLogin).
Pre-requisites OneLogin Configuration
The following details pertain to our Production environment and will need a representative from Core Strengths to enable the feature within your platform account.
On the OneLogin portal page (
), choose https://your-new-domain.onelogin.com/portal/ Administration.
At the top of the Administration page, pause on
Apps, and then choose Add apps.
In the search bar under
Find Applications, enter saml, and then choose SAML Custom Connector (Advanced) to open the SAML Custom Connector (Advanced) page.
Navigate to the
Configuration page and populate the following details:
If you want to have your employees navigate to the login page directly without first proceeding to our application you may populate the
Login URL field with https://core-cloud-prod.cognito.corestrengths.com/oauth2/authorize?redirect_uri=https://app.corestrengths.com&response_type=code&client_id=438ma1rcb2sf9orgd2dg4cgi41&identity_provider=INSERT_IDP_AFTER_CONFIGURATION_WITH_CORE_STRENGTHS&scope=email openid profile
And also change
SAML Initiator to Service Provider
Now navigate to the
Parameters page to fill out the claims: NameIdentifier Family Name Given Name
That is the only configuration necessary for OneLogin SAML page. All other settings may be ignored.
Core Strengths Platform Configuration
Configuration within Core Strengths Account Settings: (Feature Flag
SSO Enabled will need to be enabled [
true] upon engagement)
Add email domains we wish to target within the
Email Identifiers input
email attribute mapping add
MetadataURI with your given Issuer URL similar to:
Optionally Enable Single Sign-out workflows (SSOut)
This allows session termination (logout) to call our IdP. When a user logs off of Core Strengths Platform, the platform will request a best-effort “sign-out of all-applications” to your IdP.
Once a CoreStrengths Platform account has been configured for SSO, people can navigate to the login page directly without first proceeding to the platform. The
Login URL field will be very similar to the following (replacing the
identity_provider value with one provided to you by CoreStrengths)
Hosted SSO Link (example above), specific for your organization, can be found on the
Settings page, under the
SSO chunk. See below for an in-page location hint.