SSO OneLogin

This article describes how to integrate OneLogin with Anodot Cost.

Integrate OneLogin:

1. Access your OneLogin developer account.
2. On the Administration page, go to Applications > Add App.
3. Find the AWS Cognito.
4. Set Anodot Cost (SAML) under the Display name (or any other name).
5. Add an icon and description (optional).
6. Click Save.
7. Go to Applications > Anodot Cost (SAML) > Configuration and enter the following: 
   - In SAML Audience, set: urn:amazon:cognito:sp:us-east-1_Uv6ArNdSK
   - In ACS (Consumer) URL, set the same: https://mypileus.auth.us-east-1.amazoncognito.com/saml2/idpresponse
   - In ACS (Consumer) URL Validator, set: https://mypileus.auth.us-east-1.amazoncognito.com/saml2/idpresponse
   - In the Single Logout URL, set: https://mypileus.io/log_out
8. Click Save.
9. Go to Applications > Anodot Cost (SAML) > Users.
10. Add the relevant users.
11. Forward to Anodot support the following to complete the configuration on Anodot's side (support@anodot.com):
    - Issuer URL (go to Applications > Anodot Cost (SAML) > SSO > Issuer URL)
    - A list of all email domains
12. After Anodot completes the integration, we will provide you the URL value, please enter it in OneLogin at:
    - Go to Applications > Anodot Cost (SAML) > Configuration
    - at the Login URL set the URL you received from Anodot.

As part of the SSO integration, follow the steps below to add users and management roles from the IDP (identity provider):

1. Navigate to the Applications > Anodot Cost (SAML) > Parameters.
2. Click on "+" icon.
3. Define the New field as follows and click on Save:
   
4. Navigate to the Applications > Anodot Cost (SAML) > Rules.
5. Click on Add Rule.
6. Define the condition based on your roles.
7. Under the Actions section, define the following: 
   
   Note: you can find the role ID of a specific role on the Accounts > Roles & Users page.