Documentation
Demos
Support
Blog
Start Free Trial
Search results

OneLogin support for SSO authentication

Bold BI application supports adding users using the OneLogin provider. By importing them, you can share the dashboards and email exported dashboards with them.

NOTE: This feature is available in Bold BI Embedded Analytics but not in Cloud Analytics Server.

How to register the Bold BI application in OneLogin

This section explains how to perform Single Sign-On for users in OneLogin with the Bold BI application.

NOTE: This configuration has to be done in OneLogin website.

Prerequisites

  • An admin account in OneLogin.
  • Install Bold BI application.

Steps to register the Bold BI application

  1. Login to the OneLogin website with an admin account.

  2. Click Applications in the header menu.

    Application page

  3. Click Add App button.

    Add Application page

  4. Type the word OpenId Connector oidc in the search box and click on the result.

    Openidconnect

  5. Type the application name and click on Add App

  6. Save the application name in the Display Name

    Application name

  7. If you want to use the Bold BI mobile application, follow the above steps and finally click SSO and change the Application Type as Native. If not, proceed further as it is.

    Mobile type

  8. Click the Configuration tab and save the Redirect URI's. For Bold BI application, use the Mobile App Redirect URI and use the Redirect URI for the web application.

    Redirect URI

  9. The Redirect URI and Login URL is found under the OpenID Connect settings of your Bold BI application as in the following screenshot.

    Redirecturi in setting

  10. Click SSO tab, you will find the Client ID and Client Secret and use it in the Bold BI application.

    OneLoginClient details

After successful registration in OneLogin, save these settings in Bold BI settings page to enable this authentication.

Enable OneLogin support for authentication in Bold BI

Configure the settings in Bold BI as in the following screenshot to enable the authentication using the OneLogin.

OneLogin settings

The fields to be saved in the Bold BI to enable the OneLogin for authentication is explained as follows.

Provider Name It represents the name of the authentication provider to be displayed in the login page.
Provider Logo It represents the logo of the authentication provider to be displayed in the login page.
Authority It must be in the form https://subdomain.onelogin.com/oidc. Sub domain represents the OneLogin instance.
Client ID The Client ID you get after registered the Bold BI application in OneLogin website.
Client Secret The Client Secret you get after registered the Bold BI application in OneLogin website.
Identifier preferred_username
Logout Endpoint It is the endpoint in the OneLogin website that signs the user out.

Configure OneLogin Group Import Settings in Bold BI

Configure group import setting in Bold BI using OneLogin as shown in the below image.

OneLogin Group

For generating the API client credentials follow below link, https://developers.onelogin.com/api-docs/1/getting-started/working-with-api-credentials

We use client Id and client Secret from API client credentials to get token for accessing the groups API. We need Region from API Domain for accessing OneLogin APIs. Please refer below image for region,

OneLogin Region

Previous
Next