Objective

At this time, OneLogin active user sync (SCIM) to 8x8 is not supported.

Applies To

• OneLogin identity management
• 8x8 Admin Console
• SAML 2.0 SSO

Procedure

• Add the 8x8 Application to OneLogin
• Set Up Identity Management in 8x8 Admin Console
• Configure a User in Admin Consoler for SSO Login
• 8x8 Work for Desktop SSO Login Process

Add the 8x8 Application to OneLogin

1. From Applications in OneLogin, select Add App.
   
   
2. Find and select the 8x8 app (SAML 2.0, form-based auth).
   
   
3. In App Listing > Configuration, you can change the Display Name for the app, if needed.
   
   
4. Scroll down to the bottom of the same App Listing page and confirm that Connectors is set to SAML 2.0.
   
   
5. Scroll back to the top and select Save.
6. More options will be displayed for the 8x8 app after saving. Select SSO.
   
   
7. Copy the URLs from the following fields (or return to this window later). You’ll need them later, during configuration of your 8x8 Admin Console account.
   • Issuer URL
   • SAML 2.0 Endpoint (HTTP)
   • SLO Endpoint (HTTP)
8. Select View Details for your certificate, or right-click on the link and select Open link in a new tab. If you already have your OneLogin certificate in PEM format, you can skip this part. Either way, you'll need your certificate file later.
   
   
9. If needed, scroll down the Certificates page, select the appropriate PEM-formatted certificate, and select Download.
10. Save your certificate for later upload to 8x8 Admin Console.
    
    

Next, you'll add the new 8x8 app to users, to allow them access to 8x8 applications that require authentication. If this procedure is performed using some other method in OneLogin – such as bulk edit or Roles – you can ignore these next steps, and perform that operation instead.

11. Select Users. For single users, select a user and select the plus sign icon.
    
    
12. Select the 8x8 application you just added and select Continue.
    
    
13. Make a note of the NameID and select Save. The user's NameID will need to be applied to the specific 8x8 user profile in 8x8 Admin Console, which is covered later in this article.
    
    
14. You should now see the 8x8 application assigned to the user you’ve modified. Select Save User.
15. Continue with the next steps below to make the required changes to your 8x8 Admin Console account.
    
    

Set Up Identity Management in 8x8 Admin Console

1. Log in to 8x8 Admin Console.
2. Select Identity and Security.
3. Toggle Single Sign-On (SSO) on to enable it. Note that 8x8 supports only one ID management app per account.
4. Toggle off the 8x8 Authentication option only if you want to prevent users from authenticating with 8x8 Work credentials.
   • Doing this will allow only the SAML SSO identity provider credentials to be used.
   • Keep the 8x8 Authentivation on if users should be allowed to use both authentication methods.
5. Under Select Your Identity Provider, select Other SAML SSO Provider. The screen will expand with more configuration options.
6. In SAML SSO Provider Information > SAML SSO Provider Name, enter a label you want for this SSO provider. 
7. Match the 8x8 fields with the OneLogin URL information you collected earlier, and add the OneLogin URLs into the appropriate fields in SAML Settings.

8. In Certificate in use, select Click to attach a certificate file and choose the OneLogin certificate you downloaded earlier. The file name of the certificate will appear in the field. Note that this field requires a file extension other than .pem. If needed, simply rename the pem file extension to .cert before you upload the file.
9. Finally, select Save at the bottom of the page. You should see a green confirmation banner for a few seconds at the top of the screen.
10. Continue with the next steps below to make the necessary changes to your 8x8 users in Admin Console.

Important! If after saving you find that you’ve made a mistake with the certificate, just toggle the Single Sign-On (SSO) option off and select Save to clear out the SSO information. Then follow the above process again with the correct information. The URLs can be edited without clearing the entire SSO configuration.

Configure a User in 8x8 Admin Console for SSO Login

1. In 8x8 Admin Console, select Home > Users.
2. Search for the user you’re configuring, and select the pencil icon to edit the user.
3. Scroll down to Single Sign-On (SSO) and add the user’s OneLogin NameID to the Federation ID field. Note: This field only appears after an identity provider is configured in Identity Management.
4. Select Save.
5. You should then see a green confirmation banner at the top of the screen for a few seconds.

This completes the 8x8 Admin Console configuration of OneLogin. Your configured users should now be able to log into 8x8 applications such as Work for Desktop. A brief example of the login process is shown, below.

8x8 Work for Desktop SSO Login Process

1. First, launch 8x8 Work for Desktop on your PC.
   
   
2. Enter the OneLogin NameID of the assigned user into the 8x8 Username or Email field and select Continue.
   
   
3. Select Log in using SSO.
   
   
4. In the OneLogin Username field, enter the NameID of the assigned user.
   
   
5. Enter the user’s OneLogin Password and select Continue.
6. This will complete the login to 8x8 Work for Desktop.
   
   

Other login options and login persistence may be available depending on the OneLogin administrator’s configuration of that service.

Login Issues

Invalid SAML Profile

We Could Not Verify Your SSO Account